Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2015-2291 |
— | — | 0.1568 | — | Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulne | KEV |
CVE-2018-0296 |
— | — | 0.9990 | — | Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTT | KEV |
CVE-2019-1068 |
— | — | 0.5727 | — | Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to | KEV |
CVE-2020-3452 |
— | — | 0.9999 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input | KEV |
CVE-2018-19949 |
— | — | 0.3016 | — | A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to ru | KEV |
CVE-2021-21985 |
— | — | 1.0000 | — | VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health | KEV |
CVE-2021-44228 |
— | — | 1.0000 | — | Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlle | KEV |
CVE-2022-29499 |
— | — | 0.5524 | — | The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorre | KEV |
CVE-2022-47966 |
— | — | 0.9975 | — | Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability d | KEV |
CVE-2023-26293 |
— | — | 0.0025 | 2023-04-11 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All ve | |
CVE-2024-21413 |
— | — | 0.9466 | — | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code ex | KEV |
CVE-2025-6558 |
— | — | 0.1093 | — | Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerabi | KEV |
CVE-2026-33894 |
— | — | 0.0048 | 2026-03-27 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScrip | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-04-07 | Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. | KEV |
CVE-2026-32203 |
— | — | 0.0190 | 2026-04-14 | Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny servic | |
CVE-2026-40466 |
— | — | 0.0478 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-41044 |
— | — | 0.0098 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-35433 |
— | — | 0.0077 | 2026-05-12 | Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. | |
CVE-2026-34910 |
— | — | 0.9003 | — | Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious | KEV |
CVE-2026-50632 |
— | — | 0.0067 | 2026-06-12 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lea | |
CVE-2026-50633 |
— | — | 0.0089 | 2026-06-12 | A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can | |
CVE-2026-12569 |
— | — | 0.4605 | — | PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenti | KEV |
CVE-2026-64781 |
— | — | 0.0053 | 2026-08-17 | The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18 | |
CVE-2026-65336 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65337 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-65340 |
— | — | 0.0046 | 2026-08-17 | This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iO | |
CVE-2026-43692 |
— | — | 0.0087 | 2026-09-14 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold | |
CVE-2026-84538 |
— | — | 0.0050 | 2026-09-14 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS | |
CVE-2026-86879 |
— | — | 0.0039 | 2026-09-14 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-86885 |
— | — | 0.0025 | 2026-09-14 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-86924 |
— | — | 0.0016 | 2026-09-14 | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2026-93952 |
— | — | 0.0138 | — | Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that | KEV |
CVE-2026-88771 |
— | — | 0.8216 | — | Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that c | KEV |
CVE-2026-84547 |
— | — | 0.0020 | 2026-10-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS | |
CVE-2026-86871 |
— | — | 0.0049 | 2026-10-20 | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Gold | |
CVE-2026-86963 |
— | — | 0.0034 | 2026-10-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 2 | |
CVE-2009-0927 |
— | — | 0.9663 | — | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arb | KEV |
CVE-2009-2055 |
— | — | 0.0331 | — | Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-o | KEV |
CVE-2012-0151 |
— | — | 0.8766 | — | The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not prop | KEV |
CVE-2012-1535 |
— | — | 0.7038 | — | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or | KEV |