Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48055 |
critical | 10.0 | 0.0070 | 2026-06-17 | Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versi | |
CVE-2026-48277 |
critical | 10.0 | 0.0129 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnera | |
CVE-2026-48281 |
critical | 10.0 | 0.0142 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnera | |
CVE-2026-48316 |
critical | 10.0 | 0.0112 | 2026-07-06 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnera | |
CVE-2026-48056 |
critical | 10.0 | 0.0055 | 2026-08-11 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions p | |
CVE-2026-115905 |
critical | 10.0 | 0.0032 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, Zip | |
CVE-2026-54120 |
critical | 9.9 | 0.0096 | 2026-07-23 | Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a | |
CVE-2026-47367 |
critical | 9.9 | 0.0083 | 2026-06-12 | A malicious actor with access to the network and low privileges could exploit an Improper Input Vali | |
CVE-2026-50748 |
critical | 9.9 | 0.0163 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper Input Vali | |
CVE-2026-60719 |
critical | 9.9 | 0.0039 | 2026-07-21 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). | |
CVE-2026-20303 |
critical | 9.9 | 0.0049 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst | |
CVE-2026-105895 |
critical | 9.9 | 0.0071 | 2026-10-13 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result | |
CVE-2026-115915 |
critical | 9.8 | 0.0063 | 2026-10-26 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO pas | |
CVE-2026-97805 |
critical | 9.8 | 0.0106 | 2026-10-13 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute | |
CVE-2026-70024 |
critical | 9.8 | 0.0096 | 2026-10-13 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker | |
CVE-2023-31039 |
critical | 9.8 | 0.0152 | 2023-05-08 | Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary | |
CVE-2026-20093 |
critical | 9.8 | 0.0099 | 2026-04-01 | A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) | |
CVE-2026-41268 |
critical | 9.8 | 0.1744 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-41293 |
critical | 9.8 | 0.0170 | 2026-05-12 | Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11 | |
CVE-2026-50628 |
critical | 9.8 | 0.0071 | 2026-06-12 | A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP addres | |
CVE-2026-54133 |
critical | 9.8 | 0.0044 | 2026-06-12 | jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elem | |
CVE-2026-7803 |
critical | 9.8 | 0.0064 | 2026-06-30 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper validatio | |
CVE-2026-14104 |
critical | 9.8 | 0.0052 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 | |
CVE-2026-46454 |
critical | 9.8 | 0.0083 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel Cometd Component. The camel-cometd componen | |
CVE-2026-46456 |
critical | 9.8 | 0.0079 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel AWS2-SQS Component. The camel-aws2-sqs com | |
CVE-2026-48204 |
critical | 9.8 | 0.0073 | 2026-07-06 | Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gr | |
CVE-2026-51599 |
critical | 9.8 | 0.0053 | 2026-07-09 | An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build | |
CVE-2026-44180 |
critical | 9.8 | 0.0072 | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like | |
CVE-2026-53412 |
critical | 9.8 | 0.0053 | 2026-07-16 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom | |
CVE-2026-43793 |
critical | 9.8 | 0.0059 | 2026-07-27 | An issue existed in the handling of environment variables. This issue was addressed with improved va | |
CVE-2026-40920 |
critical | 9.8 | 0.0073 | 2026-08-10 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Users are re | |
CVE-2026-42537 |
critical | 9.8 | 0.0129 | 2026-08-10 | Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgr | |
CVE-2026-49827 |
critical | 9.8 | 0.0086 | 2026-08-13 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1 | |
CVE-2026-118309 |
critical | 9.6 | 0.0022 | 2026-10-27 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remo | |
CVE-2026-118310 |
critical | 9.6 | 0.0022 | 2026-10-27 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a r | |
CVE-2026-118316 |
critical | 9.6 | 0.0021 | 2026-10-27 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to | |
CVE-2026-118321 |
critical | 9.6 | 0.0022 | 2026-10-27 | Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a re | |
CVE-2026-118332 |
critical | 9.6 | 0.0021 | 2026-10-27 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote at | |
CVE-2026-118355 |
critical | 9.6 | 0.0021 | 2026-10-27 | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-33471 |
critical | 9.6 | 0.0022 | 2026-04-22 | nimiq-block contains block primitives to be used in Nimiq's Rust implementation. `SkipBlockProof::ve | |
CVE-2026-43899 |
critical | 9.6 | 0.0040 | 2026-05-11 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and ag | |
CVE-2026-44482 |
critical | 9.6 | 0.0034 | 2026-05-14 | soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock sup | |
CVE-2026-52780 |
critical | 9.6 | 0.0039 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache | |
CVE-2026-13780 |
critical | 9.6 | 0.0043 | 2026-06-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13781 |
critical | 9.6 | 0.0043 | 2026-06-30 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-13797 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-13843 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13901 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-13920 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871. | |
CVE-2026-13934 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4 |