Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47251 |
medium | 6.8 | 0.0016 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8 | |
CVE-2026-19028 |
medium | 6.8 | 0.0019 | 2026-08-06 | H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 prior to 2.3.0 computes the data length to checksu | |
CVE-2026-65799 |
medium | 6.7 | 0.0034 | 2026-08-11 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges lo | |
CVE-2026-48065 |
medium | 6.7 | 0.0015 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, s | |
CVE-2026-40449 |
medium | 6.6 | 0.0014 | 2026-04-22 | Integer overflow in buffer size calculation could result in out of bounds memory access when handlin | |
CVE-2026-40450 |
medium | 6.6 | 0.0014 | 2026-04-22 | Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incor | |
CVE-2026-41664 |
medium | 6.6 | 0.0010 | 2026-04-22 | Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid me | |
CVE-2026-41666 |
medium | 6.6 | 0.0014 | 2026-04-22 | Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bou | |
CVE-2026-41667 |
medium | 6.6 | 0.0016 | 2026-04-22 | Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause inc | |
CVE-2026-73645 |
medium | 6.6 | 0.0052 | 2026-08-13 | OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Za | |
CVE-2026-96641 |
medium | 6.5 | 0.0034 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging | |
CVE-2026-34378 |
medium | 6.5 | 0.0026 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-6385 |
medium | 6.5 | 0.0044 | 2026-04-15 | A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specia | |
CVE-2026-33596 |
medium | 6.5 | 0.0017 | 2026-04-22 | A client might theoretically be able to cause a mismatch between queries sent to a backend and the r | |
CVE-2026-42580 |
medium | 6.5 | 0.0038 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1. | |
CVE-2026-0128 |
medium | 6.5 | 0.0019 | 2026-06-16 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overfl | |
CVE-2026-56409 |
medium | 6.5 | 0.0012 | 2026-06-21 | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is | |
CVE-2026-46463 |
medium | 6.5 | 0.0033 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-58207 |
medium | 6.5 | 0.0056 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2025-14181 |
medium | 6.5 | 0.0031 | 2026-09-25 | The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer ov | |
CVE-2026-41257 |
medium | 6.4 | 0.0014 | 2026-05-11 | jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks it | |
CVE-2026-54226 |
medium | 6.4 | 0.0040 | 2026-06-25 | A vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.6.0 through 2.15.0. U | |
CVE-2026-116734 |
medium | 6.3 | 0.0038 | 2026-10-26 | flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the | |
CVE-2026-42217 |
medium | 6.3 | 0.0039 | 2026-05-07 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-57235 |
medium | 6.3 | 0.0043 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-54900 |
medium | 6.3 | 0.0052 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-54903 |
medium | 6.3 | 0.0041 | 2026-07-01 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior | |
CVE-2026-55026 |
medium | 6.2 | 0.0045 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor | |
CVE-2026-42199 |
medium | 6.2 | 0.0019 | 2026-05-08 | Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer over | |
CVE-2026-34671 |
medium | 6.2 | 0.0019 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer | |
CVE-2026-34680 |
medium | 6.2 | 0.0026 | 2026-05-12 | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Integer | |
CVE-2026-41665 |
medium | 6.1 | 0.0014 | 2026-04-22 | Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause | |
CVE-2026-42144 |
medium | 6.1 | 0.0014 | 2026-05-04 | CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer ove | |
CVE-2026-47714 |
medium | 6.1 | 0.0015 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline | |
CVE-2026-55648 |
medium | 6.1 | 0.0043 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, freerdp_image_copy | |
CVE-2026-28214 |
medium | 6.0 | 0.0113 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-28532 |
medium | 6.0 | 0.0022 | 2026-04-30 | FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering | |
CVE-2026-58472 |
medium | 6.0 | 0.0039 | 2026-07-07 | GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in t | |
CVE-2026-55400 |
medium | 6.0 | 0.0037 | 2026-08-13 | CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers w | |
CVE-2026-34380 |
medium | 5.9 | 0.0026 | 2026-04-06 | OpenEXR provides the specification and reference implementation of the EXR file format, an image sto | |
CVE-2026-44216 |
medium | 5.9 | 0.0032 | 2026-05-14 | Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocat | |
CVE-2026-114645 |
medium | 5.7 | 0.0017 | 2026-10-22 | A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code | |
CVE-2026-32849 |
medium | 5.7 | 0.0011 | 2026-05-18 | NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op( | |
CVE-2026-15534 |
medium | 5.7 | 0.0016 | 2026-08-09 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matc | |
CVE-2023-53661 |
medium | 5.5 | 0.0016 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_ge | |
CVE-2026-55057 |
medium | 5.5 | 0.0054 | 2026-07-14 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose infor | |
CVE-2026-39855 |
medium | 5.5 | 0.0014 | 2026-04-09 | osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an inte | |
CVE-2026-43894 |
medium | 5.5 | 0.0016 | 2026-05-11 | jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a numbe | |
CVE-2026-52972 |
medium | 5.5 | 0.0014 | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Cap AEAD AD le | |
CVE-2026-15551 |
medium | 5.5 | 0.0011 | 2026-07-13 | Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. |