Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1098)
CWE-22 (1025)
CWE-125 (884)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (688)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-70318 |
medium | 5.5 | 0.0054 | 2026-08-11 | Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose info | |
CVE-2026-70319 |
medium | 5.5 | 0.0043 | 2026-08-11 | Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose infor | |
CVE-2026-70320 |
medium | 5.5 | 0.0043 | 2026-08-11 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose | |
CVE-2026-70322 |
medium | 5.5 | 0.0043 | 2026-08-11 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose | |
CVE-2026-70323 |
medium | 5.5 | 0.0043 | 2026-08-11 | Improper input validation in Microsoft Office allows an unauthorized attacker to disclose informatio | |
CVE-2026-70325 |
medium | 5.5 | 0.0043 | 2026-08-11 | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose | |
CVE-2026-70294 |
medium | 5.5 | 0.0046 | 2026-10-13 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose infor | |
CVE-2026-39417 |
medium | 5.5 | 0.0024 | 2026-04-14 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete | |
CVE-2026-35369 |
medium | 5.5 | 0.0013 | 2026-04-22 | An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as | |
CVE-2026-35380 |
medium | 5.5 | 0.0016 | 2026-04-22 | A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the | |
CVE-2026-8759 |
medium | 5.5 | 0.0041 | 2026-05-17 | A vulnerability was identified in xiandafu beetl up to 3.20.2. Affected is an unknown function of th | |
CVE-2026-13929 |
medium | 5.5 | 0.0014 | 2026-06-30 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allow | |
CVE-2026-50012 |
medium | 5.5 | 0.0136 | 2026-07-16 | Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache | |
CVE-2026-16632 |
medium | 5.5 | 0.0052 | 2026-07-23 | A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_proto | |
CVE-2026-111869 |
medium | 5.5 | 0.0053 | 2026-10-18 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of th | |
CVE-2026-76462 |
medium | 5.5 | 0.0014 | 2026-10-21 | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture modul | |
CVE-2026-112658 |
medium | 5.5 | 0.0020 | 2026-10-26 | This issue was addressed with improved input validation. This issue is fixed in iOS 27.2 and iPadOS | |
CVE-2026-62828 |
medium | 5.4 | 0.0041 | 2026-07-28 | Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform t | |
CVE-2026-32629 |
medium | 5.4 | 0.0026 | 2026-04-02 | phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, an unauthenticated attacker | |
CVE-2026-7931 |
medium | 5.4 | 0.0019 | 2026-05-06 | Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 all | |
CVE-2026-7962 |
medium | 5.4 | 0.0017 | 2026-05-06 | Insufficient policy enforcement in DirectSockets in Google Chrome prior to 148.0.7778.96 allowed a r | |
CVE-2026-7998 |
medium | 5.4 | 0.0019 | 2026-05-06 | Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed | |
CVE-2026-8003 |
medium | 5.4 | 0.0015 | 2026-05-06 | Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allo | |
CVE-2026-14131 |
medium | 5.4 | 0.0022 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 | |
CVE-2026-14135 |
medium | 5.4 | 0.0022 | 2026-06-30 | Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowe | |
CVE-2026-14150 |
medium | 5.4 | 0.0022 | 2026-06-30 | Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-58624 |
medium | 5.4 | 0.0063 | 2026-07-20 | Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for cl | |
CVE-2026-16415 |
medium | 5.4 | 0.0026 | 2026-07-21 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 al | |
CVE-2026-17761 |
medium | 5.4 | 0.0020 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0. | |
CVE-2026-17799 |
medium | 5.4 | 0.0021 | 2026-07-30 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 | |
CVE-2024-45431 |
medium | 5.3 | 0.0563 | 2025-09-12 | OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exis | |
CVE-2026-116098 |
medium | 5.3 | 0.0032 | 2026-10-26 | A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the func | |
CVE-2026-118537 |
medium | 5.3 | 0.0038 | 2026-10-28 | A vulnerability was found in a2ui up to 0.10.4. This vulnerability affects unknown code of the file | |
CVE-2022-29562 |
medium | 5.3 | 0.0075 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2026-33936 |
medium | 5.3 | 0.0049 | 2026-03-27 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with s | |
CVE-2026-29133 |
medium | 5.3 | 0.0023 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs | |
CVE-2026-29135 |
medium | 5.3 | 0.0025 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that | |
CVE-2026-29137 |
medium | 5.3 | 0.0019 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from us | |
CVE-2026-32990 |
medium | 5.3 | 0.0031 | 2026-04-09 | Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614. | |
CVE-2026-6231 |
medium | 5.3 | 0.0018 | 2026-04-13 | The bson_validate function may return early on specific inputs and incorrectly report success. This | |
CVE-2026-6777 |
medium | 5.3 | 0.0016 | 2026-04-21 | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunde | |
CVE-2026-6779 |
medium | 5.3 | 0.0021 | 2026-04-21 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thun | |
CVE-2026-34066 |
medium | 5.3 | 0.0024 | 2026-04-22 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version | |
CVE-2026-41654 |
medium | 5.3 | 0.0037 | 2026-05-07 | Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with projec | |
CVE-2026-8516 |
medium | 5.3 | 0.0022 | 2026-05-14 | Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 | |
CVE-2026-8538 |
medium | 5.3 | 0.0019 | 2026-05-14 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a | |
CVE-2026-48998 |
medium | 5.3 | 0.0020 | 2026-06-11 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 cont | |
CVE-2026-49214 |
medium | 5.3 | 0.0019 | 2026-06-11 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 did | |
CVE-2026-12025 |
medium | 5.3 | 0.0023 | 2026-06-11 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allow | |
CVE-2026-53537 |
medium | 5.3 | 0.0029 | 2026-06-22 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header p |