Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1099)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-29141 |
high | 7.7 | 0.0021 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitizatio | |
CVE-2026-27913 |
high | 7.7 | 0.0030 | 2026-04-14 | Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security | |
CVE-2026-33267 |
high | 7.7 | 0.0060 | 2026-07-29 | Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic | |
CVE-2026-69192 |
high | 7.7 | 0.0046 | 2026-08-03 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to | |
CVE-2026-54204 |
high | 7.7 | 0.0057 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter | |
CVE-2026-116372 |
high | 7.7 | 0.0036 | 2026-10-26 | MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on c | |
CVE-2026-54455 |
high | 7.6 | 0.0025 | 2026-10-28 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and h | |
CVE-2026-57985 |
high | 7.6 | 0.0072 | 2026-07-03 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec | |
CVE-2025-66974 |
high | 7.5 | 0.0053 | 2026-09-15 | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee | |
CVE-2026-61363 |
high | 7.5 | 0.0068 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2026-50328 |
high | 7.5 | 0.0123 | 2026-07-14 | Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampe | |
CVE-2026-58292 |
high | 7.5 | 0.0048 | 2026-07-03 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec | |
CVE-2026-59134 |
high | 7.5 | 0.0068 | 2026-08-11 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code | |
CVE-2022-31810 |
high | 7.5 | 0.0088 | 2023-07-11 | A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server | |
CVE-2025-57835 |
high | 7.5 | 0.0028 | 2026-04-06 | An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980 | |
CVE-2026-26154 |
high | 7.5 | 0.0106 | 2026-04-14 | Improper input validation in Windows Server Update Service allows an unauthorized attacker to perfor | |
CVE-2026-8007 |
high | 7.5 | 0.0019 | 2026-05-06 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a | |
CVE-2026-28860 |
high | 7.5 | 0.0038 | 2026-05-11 | The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS | |
CVE-2026-28936 |
high | 7.5 | 0.0056 | 2026-05-11 | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, i | |
CVE-2026-23825 |
high | 7.5 | 0.0033 | 2026-05-12 | Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An una | |
CVE-2026-42544 |
high | 7.5 | 0.0039 | 2026-05-12 | Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker | |
CVE-2026-45291 |
high | 7.5 | 0.0026 | 2026-06-05 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in v | |
CVE-2026-50196 |
high | 7.5 | 0.0045 | 2026-06-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cl | |
CVE-2026-48774 |
high | 7.5 | 0.0039 | 2026-06-19 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 3.0.0 through 3.0.8, | |
CVE-2026-54299 |
high | 7.5 | 0.0033 | 2026-06-22 | Astro is a web framework. Prior to 6.4.6, Astro SSR apps with prerendered error pages (/404 or /500 | |
CVE-2026-13794 |
high | 7.5 | 0.0049 | 2026-06-30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 15 | |
CVE-2026-13824 |
high | 7.5 | 0.0030 | 2026-06-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13856 |
high | 7.5 | 0.0030 | 2026-06-30 | Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871 | |
CVE-2026-13891 |
high | 7.5 | 0.0030 | 2026-06-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-13925 |
high | 7.5 | 0.0039 | 2026-06-30 | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed | |
CVE-2026-13968 |
high | 7.5 | 0.0036 | 2026-06-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allow | |
CVE-2026-14115 |
high | 7.5 | 0.0030 | 2026-06-30 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-54405 |
high | 7.5 | 0.0052 | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerabilit | |
CVE-2026-46457 |
high | 7.5 | 0.0066 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel NATS component. The camel-nats component ma | |
CVE-2026-46585 |
high | 7.5 | 0.0063 | 2026-07-06 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache | |
CVE-2026-46592 |
high | 7.5 | 0.0063 | 2026-07-06 | Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apa | |
CVE-2026-46726 |
high | 7.5 | 0.0086 | 2026-07-06 | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side R | |
CVE-2026-54234 |
high | 7.5 | 0.0062 | 2026-07-06 | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24. | |
CVE-2026-59724 |
high | 7.5 | 0.0061 | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before | |
CVE-2026-51606 |
high | 7.5 | 0.0039 | 2026-07-09 | An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) | |
CVE-2026-40454 |
high | 7.5 | 0.0049 | 2026-07-10 | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bound | |
CVE-2026-20153 |
high | 7.5 | 0.0047 | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS en | |
CVE-2026-59954 |
high | 7.5 | 0.0057 | 2026-07-15 | Apollo is a reliable configuration management system suitable for microservice configuration managem | |
CVE-2026-59955 |
high | 7.5 | 0.0057 | 2026-07-15 | Apollo is a reliable configuration management system suitable for microservice configuration managem | |
CVE-2026-33692 |
high | 7.5 | 0.0035 | 2026-07-16 | WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenti | |
CVE-2026-42566 |
high | 7.5 | 0.0049 | 2026-07-20 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single nod | |
CVE-2026-16378 |
high | 7.5 | 0.0042 | 2026-07-21 | Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Fire | |
CVE-2026-16422 |
high | 7.5 | 0.0019 | 2026-07-21 | Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7 | |
CVE-2026-55973 |
high | 7.5 | 0.0028 | 2026-07-22 | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the | |
CVE-2026-43777 |
high | 7.5 | 0.0070 | 2026-07-27 | This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8 |