Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15627 |
low | 2.1 | 0.0042 | 2026-07-14 | A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability af | |
CVE-2026-40956 |
low | 2.1 | 0.0027 | 2026-07-15 | CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. | |
CVE-2026-17457 |
low | 2.1 | 0.0042 | 2026-07-26 | A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the fun | |
CVE-2026-18038 |
low | 2.1 | 0.0039 | 2026-07-28 | A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the | |
CVE-2026-18995 |
low | 2.1 | 0.0049 | 2026-08-06 | A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTok | |
CVE-2026-4957 |
low | 2.0 | 0.0029 | 2026-03-27 | A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler. | |
CVE-2026-7021 |
low | 2.0 | 0.0018 | 2026-04-26 | A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the | |
CVE-2026-60964 |
low | 1.9 | 0.0013 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open | |
CVE-2026-47016 |
low | 1.9 | 0.0016 | 2026-07-21 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish a | |
CVE-2026-60891 |
low | 1.9 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60913 |
low | 1.9 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal | |
CVE-2026-61303 |
low | 1.9 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Oper | |
CVE-2026-19245 |
low | 1.9 | 0.0017 | 2026-08-07 | A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._p | |
CVE-2026-32270 |
low | 1.7 | 0.0029 | 2026-04-13 | Craft Commerce is an ecommerce platform for Craft CMS. In versions 4.0.0 through 4.10.2 and 5.0.0 th | |
CVE-2026-34088 |
low | 1.3 | 0.0029 | 2026-05-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2026-34093 |
low | 1.1 | 0.0023 | 2026-05-11 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2026-42873 |
none | — | 0.0023 | 2026-05-11 | WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, when attempting to | |
CVE-2026-58026 |
none | — | 0.0037 | 2026-07-01 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Med | |
CVE-2020-3259 |
— | — | 0.7150 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information di | KEV |
CVE-2021-41277 |
— | — | 0.9718 | — | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read | KEV |
CVE-2024-24919 |
— | — | 0.9998 | — | Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. T | KEV |
CVE-2026-20805 |
— | — | 0.0746 | — | Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allo | KEV |
CVE-2025-68686 |
— | — | 0.2950 | — | Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerabilit | KEV |
CVE-2026-4660 |
— | — | 0.0058 | 2026-04-09 | HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during | |
CVE-2026-22016 |
— | — | 0.0070 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-42880 |
— | — | 0.0065 | 2026-05-07 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to bef | |
CVE-2026-64778 |
— | — | 0.0034 | 2026-08-17 | The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and | |
CVE-2026-43664 |
— | — | 0.0016 | 2026-09-14 | This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 2 | |
CVE-2026-43687 |
— | — | 0.0045 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26 | |
CVE-2026-64761 |
— | — | 0.0033 | 2026-09-14 | A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS | |
CVE-2026-65371 |
— | — | 0.0018 | 2026-09-14 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iO | |
CVE-2026-84530 |
— | — | 0.0015 | 2026-09-14 | An information disclosure issue was addressed with improved memory management. This issue is fixed i | |
CVE-2026-84576 |
— | — | 0.0016 | 2026-09-14 | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Se | |
CVE-2026-84583 |
— | — | 0.0016 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and | |
CVE-2026-84586 |
— | — | 0.0016 | 2026-09-14 | An information disclosure issue was addressed with improved state management. This issue is fixed in | |
CVE-2026-84625 |
— | — | 0.0047 | 2026-09-14 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 2 | |
CVE-2026-84626 |
— | — | 0.0015 | 2026-09-14 | An information disclosure issue was addressed with improved state management. This issue is fixed in | |
CVE-2026-86878 |
— | — | 0.0015 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iP | |
CVE-2026-86883 |
— | — | 0.0015 | 2026-09-14 | A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPa | |
CVE-2026-86887 |
— | — | 0.0016 | 2026-09-14 | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS | |
CVE-2026-86895 |
— | — | 0.0047 | 2026-09-14 | An information disclosure issue was addressed with improved state management. This issue is fixed in | |
CVE-2026-65379 |
— | — | 0.0014 | 2026-10-20 | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS G | |
CVE-2026-86914 |
— | — | 0.0015 | 2026-10-20 | An information disclosure issue was addressed with improved state management. This issue is fixed in | |
CVE-2008-0655 |
— | — | 0.3787 | — | Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which cou | KEV |