Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-114729 |
medium | 5.3 | 0.0038 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypa | |
CVE-2026-115845 |
medium | 5.3 | 0.0031 | 2026-10-23 | An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS M | |
CVE-2026-25525 |
medium | 4.9 | 0.0050 | 2026-04-20 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative t | |
CVE-2026-26067 |
medium | 4.9 | 0.0025 | 2026-04-21 | October is a Content Management System (CMS) and web platform. Prior to 3.7.14 and 4.1.10, a server- | |
CVE-2026-68921 |
medium | 4.7 | 0.0029 | 2026-08-20 | DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpola | |
CVE-2026-40077 |
low | 3.1 | 0.0022 | 2026-04-09 | Beszel is a server monitoring platform. Prior to 0.18.7, some API endpoints in the Beszel hub accept | |
CVE-2026-57234 |
low | 2.6 | 0.0020 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-53848 |
low | 2.3 | 0.0019 | 2026-06-16 | OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated ope | |
CVE-2026-73491 |
low | 2.3 | 0.0039 | 2026-08-12 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, buil | |
CVE-2026-73492 |
low | 2.3 | 0.0039 | 2026-08-12 | Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, buil | |
CVE-2026-15625 |
low | 2.1 | 0.0048 | 2026-07-14 | A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function | |
CVE-2026-16129 |
low | 1.9 | 0.0032 | 2026-07-18 | A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the | |
CVE-2026-54513 |
— | — | 0.0123 | 2026-06-23 | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson |