Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-8721 |
critical | 9.8 | 0.0045 | 2026-05-17 | Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Pass | |
CVE-2026-55738 |
high | 8.7 | 0.0040 | 2026-06-17 | A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar | |
CVE-2026-63860 |
high | 8.4 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRIN | |
CVE-2026-83781 |
high | 7.8 | 0.0036 | 2026-10-13 | Improper null termination in Windows Program Compatibility Assistant Service allows an authorized at | |
CVE-2026-45798 |
high | 7.5 | 0.0092 | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4 | |
CVE-2026-42010 |
high | 7.1 | 0.0105 | 2026-05-07 | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) | |
CVE-2026-57185 |
medium | 6.5 | 0.0048 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-96860 |
medium | 5.5 | 0.0039 | 2026-10-13 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information | |
CVE-2026-96850 |
medium | 5.5 | 0.0044 | 2026-10-13 | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacke | |
CVE-2026-34032 |
medium | 5.3 | 0.0049 | 2026-05-04 | Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affec | |
CVE-2026-12386 |
low | 3.9 | 0.0013 | 2026-07-05 | Improper null termination vulnerability in TUBITAK BILGEM Software Technologies Research Institute P | |
CVE-2026-114457 |
low | 3.7 | 0.0037 | 2026-10-22 | A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS | |
CVE-2026-40334 |
low | 3.5 | 0.0019 | 2026-04-18 | libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing | |
CVE-2026-33948 |
low | 2.9 | 0.0026 | 2026-04-14 | jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain |