Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-59130 |
medium | 5.6 | 0.0037 | 2026-08-11 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally. | |
CVE-2026-114606 |
medium | 5.6 | 0.0019 | 2026-10-22 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulne | |
CVE-2023-21435 |
medium | 5.5 | 0.0018 | 2023-02-09 | Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 al | |
CVE-2024-29720 |
medium | 5.5 | 0.0018 | 2025-12-26 | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sensi | |
CVE-2026-16973 |
medium | 5.5 | 0.0014 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive ker | |
CVE-2026-60839 |
medium | 5.5 | 0.0027 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Quer | |
CVE-2026-87334 |
medium | 5.5 | 0.0014 | 2026-10-20 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). | |
CVE-2026-87391 |
medium | 5.5 | 0.0015 | 2026-10-20 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-91290 |
medium | 5.5 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-116507 |
medium | 5.5 | 0.0040 | 2026-10-26 | A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerabi | |
CVE-2026-33842 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-34328 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an author | |
CVE-2026-34349 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att | |
CVE-2026-41087 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-50334 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authori | |
CVE-2026-50339 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a | |
CVE-2026-50350 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driv | |
CVE-2026-50352 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows | |
CVE-2026-50389 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-50394 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att | |
CVE-2026-50409 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an autho | |
CVE-2026-50430 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a | |
CVE-2026-50431 |
medium | 5.5 | 0.0048 | 2026-07-14 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | |
CVE-2026-50434 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a | |
CVE-2026-50442 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-50456 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-50473 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-50483 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an | |
CVE-2026-50681 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows | |
CVE-2026-54123 |
medium | 5.5 | 0.0048 | 2026-08-11 | Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows | |
CVE-2026-56184 |
medium | 5.5 | 0.0048 | 2026-07-14 | Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized at | |
CVE-2026-20648 |
medium | 5.5 | 0.0025 | 2026-02-11 | A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed | |
CVE-2026-5650 |
medium | 5.5 | 0.0031 | 2026-04-06 | A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is | |
CVE-2026-5666 |
medium | 5.5 | 0.0030 | 2026-04-06 | A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some | |
CVE-2026-40159 |
medium | 5.5 | 0.0018 | 2026-04-10 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI’s MCP (Model Context Protocol) | |
CVE-2026-6160 |
medium | 5.5 | 0.0031 | 2026-04-13 | A vulnerability was found in code-projects Simple ChatBox 1.0. Affected by this issue is the functio | |
CVE-2026-32079 |
medium | 5.5 | 0.0034 | 2026-04-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-32081 |
medium | 5.5 | 0.0042 | 2026-04-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-32084 |
medium | 5.5 | 0.0035 | 2026-04-14 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author | |
CVE-2026-32085 |
medium | 5.5 | 0.0044 | 2026-04-14 | Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows a | |
CVE-2026-6492 |
medium | 5.5 | 0.0042 | 2026-04-17 | A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc76197 | |
CVE-2026-7071 |
medium | 5.5 | 0.0038 | 2026-04-27 | A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vuln | |
CVE-2026-8033 |
medium | 5.5 | 0.0029 | 2026-05-06 | A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an u | |
CVE-2026-34091 |
medium | 5.5 | 0.0029 | 2026-05-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2026-28958 |
medium | 5.5 | 0.0014 | 2026-05-11 | This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 18.7 | |
CVE-2026-49336 |
medium | 5.5 | 0.0075 | 2026-06-19 | @microsoft/kiota-http-fetchlibrary provides TypeScript libraries for Kiota-generated API clients. In | |
CVE-2026-32315 |
medium | 5.5 | 0.0168 | 2026-06-24 | motionEye (mEye) is an online interface for motion software, a video surveillance program with motio | |
CVE-2026-16201 |
medium | 5.5 | 0.0053 | 2026-07-19 | A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_ | |
CVE-2026-60607 |
medium | 5.5 | 0.0017 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: | |
CVE-2026-20672 |
medium | 5.5 | 0.0017 | 2026-07-27 | An information disclosure issue was addressed with improved privacy controls. This issue is fixed in |