Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-23863 |
medium | 6.5 | 0.0053 | 2026-05-01 | An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have a | |
CVE-2026-41256 |
medium | 5.5 | 0.0016 | 2026-05-11 | jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file | |
CVE-2026-116566 |
medium | 5.3 | — | 2026-10-29 | socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can ca | |
CVE-2026-118767 |
medium | 4.8 | — | 2026-10-29 | Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Pyt | |
CVE-2026-43895 |
medium | 4.4 | 0.0016 | 2026-05-11 | jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import p | |
CVE-2026-47778 |
medium | 4.4 | 0.0021 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35 | |
CVE-2009-1537 |
— | — | 0.5136 | — | Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter | KEV |