Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47219 |
high | 7.5 | 0.0046 | 2026-07-28 | find-my-way is a framework-independent HTTP router that internally uses a Radix Tree and supports ro | |
CVE-2026-17698 |
high | 7.5 | 0.0027 | 2026-07-30 | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 | |
CVE-2026-17774 |
high | 7.5 | 0.0018 | 2026-07-30 | Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17930 |
high | 7.5 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-21548 |
high | 7.5 | 0.0071 | 2026-08-03 | In nr modem, there is a possible improper input validation. This could lead to remote denial of serv | |
CVE-2026-21549 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21550 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21551 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21552 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21553 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21554 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-21555 |
high | 7.5 | 0.0071 | 2026-08-03 | In modem, there is a possible improper input validation. This could lead to remote denial of service | |
CVE-2026-69185 |
high | 7.5 | 0.0063 | 2026-08-03 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3. | |
CVE-2026-67978 |
high | 7.5 | 0.0032 | 2026-08-03 | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service ( | |
CVE-2026-47629 |
high | 7.5 | 0.0067 | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause impr | |
CVE-2026-53587 |
high | 7.5 | 0.0047 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-91405 |
high | 7.5 | 0.0028 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91406 |
high | 7.5 | 0.0036 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-76505 |
high | 7.5 | 0.0047 | 2026-10-21 | A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Ci | |
CVE-2026-73261 |
high | 7.5 | 0.0035 | 2026-10-14 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack ena | |
CVE-2026-90869 |
high | 7.5 | — | 2026-10-29 | A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH s | |
CVE-2026-13341 |
high | 7.4 | 0.0045 | 2026-07-03 | A vulnerability exists in the Kong Konnect Model Context Protocol (MCP) server prior to version 1.0. | |
CVE-2026-4982 |
high | 7.3 | 0.0023 | 2026-03-27 | A user with permission "update world" in any Venueless world is able to exfiltrate chat messages fro | |
CVE-2026-32149 |
high | 7.3 | 0.0032 | 2026-04-14 | Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. | |
CVE-2026-21733 |
high | 7.3 | 0.0010 | 2026-04-17 | Software installed and run as a non-privileged user may conduct improper GPU system calls to gain wr | |
CVE-2026-46587 |
high | 7.3 | 0.0069 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4 | |
CVE-2026-46588 |
high | 7.3 | 0.0069 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4 | |
CVE-2026-49042 |
high | 7.3 | 0.0069 | 2026-07-06 | Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8. | |
CVE-2026-67326 |
high | 7.3 | 0.0025 | 2026-08-01 | GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writ | |
CVE-2026-22615 |
high | 7.2 | 0.0034 | 2026-04-16 | Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is po | |
CVE-2026-24504 |
high | 7.2 | 0.0044 | 2026-04-20 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through | |
CVE-2026-24505 |
high | 7.2 | 0.0042 | 2026-04-20 | Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnera | |
CVE-2026-40871 |
high | 7.2 | 0.0857 | 2026-04-21 | mailcow: dockerized is an open source groupware/email suite based on docker. Versions prior to 2026- | |
CVE-2026-6973 |
high | 7.2 | 0.3445 | 2026-05-07 | Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allow | KEV |
CVE-2026-12246 |
high | 7.2 | 0.0044 | 2026-06-25 | NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than | |
CVE-2026-40712 |
high | 7.2 | 0.0050 | 2026-07-22 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation | |
CVE-2026-40714 |
high | 7.2 | 0.0050 | 2026-07-22 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation | |
CVE-2026-46737 |
high | 7.2 | 0.0063 | 2026-07-22 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation | |
CVE-2026-46738 |
high | 7.2 | 0.0050 | 2026-07-22 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation | |
CVE-2024-58380 |
high | 7.1 | 0.0053 | 2026-09-09 | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket han | |
CVE-2026-70126 |
high | 7.1 | 0.0052 | 2026-10-13 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code | |
CVE-2026-116469 |
high | 7.1 | 0.0037 | 2026-10-26 | MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity fl | |
CVE-2025-40831 |
high | 7.1 | 0.0039 | 2025-12-09 | A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected | |
CVE-2026-33797 |
high | 7.1 | 0.0017 | 2026-04-09 | An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows | |
CVE-2026-6409 |
high | 7.1 | 0.0036 | 2026-04-16 | A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of unt | |
CVE-2026-5941 |
high | 7.1 | 0.0017 | 2026-04-27 | Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing | |
CVE-2026-42261 |
high | 7.1 | 0.0024 | 2026-05-08 | PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to | |
CVE-2026-42553 |
high | 7.1 | 0.0030 | 2026-05-27 | Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a | |
CVE-2026-8714 |
high | 7.1 | 0.0021 | 2026-06-05 | A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due | |
CVE-2026-49444 |
high | 7.1 | 0.0039 | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authen |