Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13024 |
medium | 4.2 | 0.0022 | 2026-06-24 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197 al | |
CVE-2026-14137 |
medium | 4.2 | 0.0023 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-17747 |
medium | 4.2 | 0.0024 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.79 | |
CVE-2026-76033 |
medium | 4.2 | 0.0022 | 2026-08-18 | Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attac | |
CVE-2026-6180 |
medium | 4.1 | 0.0034 | 2026-05-05 | A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunctio | |
CVE-2024-6423 |
medium | 4.0 | 0.0010 | 2026-10-21 | The product failed to enforce validation constraints on user-supplied input in URL parameters, allow | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-06-16 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input va | |
CVE-2026-21830 |
low | 3.7 | 0.0025 | 2026-10-28 | HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.. It may cause AWS API | |
CVE-2026-0976 |
low | 3.7 | 0.0049 | 2026-01-15 | A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak a | |
CVE-2026-46584 |
low | 3.7 | 0.0056 | 2026-07-06 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor vulnerability | |
CVE-2026-118776 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-34685 |
low | 3.4 | 0.0037 | 2026-05-12 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier | |
CVE-2026-35377 |
low | 3.3 | 0.0010 | 2026-04-22 | A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-lin | |
CVE-2026-13942 |
low | 3.3 | 0.0012 | 2026-06-30 | Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 al | |
CVE-2026-13955 |
low | 3.3 | 0.0012 | 2026-06-30 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0. | |
CVE-2026-15115 |
low | 3.3 | 0.0013 | 2026-07-08 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 15 | |
CVE-2026-17766 |
low | 3.3 | 0.0013 | 2026-07-30 | Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7 | |
CVE-2026-17860 |
low | 3.3 | 0.0012 | 2026-07-30 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922 | |
CVE-2026-7944 |
low | 3.1 | 0.0020 | 2026-05-06 | Insufficient validation of untrusted input in Persistent Cache in Google Chrome prior to 148.0.7778. | |
CVE-2026-7945 |
low | 3.1 | 0.0020 | 2026-05-06 | Insufficient validation of untrusted input in COOP in Google Chrome prior to 148.0.7778.96 allowed a | |
CVE-2026-7965 |
low | 3.1 | 0.0021 | 2026-05-06 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allow | |
CVE-2026-7966 |
low | 3.1 | 0.0022 | 2026-05-06 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 | |
CVE-2026-7968 |
low | 3.1 | 0.0022 | 2026-05-06 | Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a | |
CVE-2026-8536 |
low | 3.1 | 0.0019 | 2026-05-14 | Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.777 | |
CVE-2026-8579 |
low | 3.1 | 0.0014 | 2026-05-14 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed | |
CVE-2026-12017 |
low | 3.1 | 0.0021 | 2026-06-11 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote | |
CVE-2026-13939 |
low | 3.1 | 0.0023 | 2026-06-30 | Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0.78 | |
CVE-2026-33948 |
low | 2.9 | 0.0026 | 2026-04-14 | jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain | |
CVE-2026-44658 |
low | 2.4 | 0.0016 | 2026-05-11 | Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated t | |
CVE-2026-113786 |
low | 2.3 | 0.0037 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PD | |
CVE-2026-40958 |
low | 2.3 | 0.0038 | 2026-07-15 | CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with i | |
CVE-2026-116230 |
low | 2.1 | 0.0032 | 2026-10-26 | A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected e | |
CVE-2026-116671 |
low | 2.1 | 0.0011 | 2026-10-26 | Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JP | |
CVE-2026-5659 |
low | 2.1 | 0.0026 | 2026-04-06 | A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.l | |
CVE-2026-6626 |
low | 2.1 | 0.0023 | 2026-04-20 | A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unkn | |
CVE-2026-7597 |
low | 2.1 | 0.0032 | 2026-05-01 | A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle. | |
CVE-2026-34086 |
low | 2.1 | 0.0024 | 2026-05-11 | Vulnerability in Wikimedia Foundation AbuseFilter. This issue affects AbuseFilter: from * before 1. | |
CVE-2026-8735 |
low | 2.1 | 0.0024 | 2026-05-17 | A vulnerability was identified in Oinone Pamirs up to 7.2.0. This affects the function JsonUtils.par | |
CVE-2026-12787 |
low | 2.1 | 0.0041 | 2026-06-21 | A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. | |
CVE-2026-15535 |
low | 2.1 | 0.0043 | 2026-07-13 | A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. | |
CVE-2026-112081 |
low | 2.1 | 0.0034 | 2026-10-19 | A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp. | |
CVE-2026-119130 |
low | 2.1 | — | 2026-10-29 | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-pat | |
CVE-2026-115249 |
low | 2.0 | 0.0019 | 2026-10-22 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07e | |
CVE-2026-15531 |
low | 1.9 | 0.0032 | 2026-07-13 | A vulnerability has been found in yashbhalgat HashNeRF-pytorch up to 82885e698295982504eb6a26d060a6b | |
CVE-2026-16316 |
low | 1.3 | 0.0024 | 2026-08-06 | OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampl | |
CVE-2026-33284 |
low | 1.2 | 0.0020 | 2026-03-27 | GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/suppor | |
CVE-2026-0238 |
low | 1.1 | 0.0010 | 2026-05-13 | A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbi | |
CVE-2026-13706 |
none | — | 0.0048 | 2026-07-01 | Improper input validation vulnerability in Wikimedia Foundation UrlShortener. This vulnerability i | |
CVE-2026-61634 |
none | — | 0.0049 | 2026-08-18 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w | |
CVE-2026-111551 |
— | — | 0.0022 | 2026-10-28 | Several Kafka deserialization paths read a size or count field from input data and use it directly t |