Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-53595 |
critical | 9.4 | 0.0194 | 2026-07-20 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version | |
CVE-2026-105608 |
high | 8.8 | 0.0045 | 2026-10-26 | HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh pro | |
CVE-2026-46392 |
high | 8.7 | 0.0027 | 2026-06-05 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX | |
CVE-2026-62230 |
high | 8.7 | 0.0038 | 2026-07-17 | Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rul | |
CVE-2026-74041 |
high | 8.6 | 0.0046 | 2026-10-13 | Wazuh 4.14.3 before 4.14.8 and 4.10.4 contains a case-sensitivity mismatch between the ossec.conf va | |
CVE-2026-109411 |
high | 8.1 | — | 2026-10-28 | An access control bypass flaw was found in Samba's vfs_ceph_rgw module in it's openat() function. An | |
CVE-2026-45062 |
high | 8.1 | 0.0071 | 2026-06-10 | FrankenPHP is a modern application server for PHP. From version 1.11.2 to before version 1.12.3, the | |
CVE-2026-45135 |
high | 8.1 | 0.0068 | 2026-06-23 | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCG | |
CVE-2026-42272 |
high | 7.8 | 0.0040 | 2026-05-08 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to versio | |
CVE-2026-42273 |
high | 7.8 | 0.0030 | 2026-05-08 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to versio | |
CVE-2026-43513 |
high | 7.5 | 0.0050 | 2026-05-12 | Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue af | |
CVE-2026-3833 |
high | 7.4 | 0.0056 | 2026-04-30 | A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive compari | |
CVE-2026-116469 |
high | 7.1 | 0.0037 | 2026-10-26 | MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity fl | |
CVE-2026-54528 |
high | 7.1 | 0.0041 | 2026-07-08 | JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmat | |
CVE-2026-108313 |
medium | 6.6 | 0.0030 | 2026-10-27 | Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | |
CVE-2026-70429 |
medium | 6.5 | 0.0042 | 2026-08-05 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and grou | |
CVE-2026-66883 |
medium | 6.3 | 0.0037 | 2026-08-04 | Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc | |
CVE-2026-114132 |
medium | 6.3 | 0.0042 | 2026-10-21 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages cas | |
CVE-2026-49336 |
medium | 5.5 | 0.0075 | 2026-06-19 | @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In | |
CVE-2026-57234 |
low | 2.6 | 0.0020 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-58057 |
low | 2.3 | 0.0156 | 2026-06-28 | Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a cas | |
CVE-2026-14617 |
low | 1.3 | 0.0037 | 2026-07-03 | A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is | |
CVE-2026-116135 |
— | — | — | 2026-10-28 | HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fie | |
CVE-2020-12812 |
— | — | — | — | Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to | KEV |
CVE-2026-40453 |
— | — | 0.0210 | 2026-04-27 | The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant | |
CVE-2026-47323 |
— | — | 0.1956 | 2026-05-19 | Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knat |