Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16798 |
medium | 6.5 | 0.0038 | 2026-07-24 | Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShe | |
CVE-2026-65434 |
medium | 6.5 | 0.0037 | 2026-07-27 | Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions. | |
CVE-2026-16637 |
medium | 6.5 | 0.0046 | 2026-08-07 | OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the A | |
CVE-2026-28174 |
medium | 6.5 | 0.0037 | 2026-08-13 | Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. | |
CVE-2026-115594 |
medium | 6.5 | 0.0032 | 2026-10-26 | Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assis | |
CVE-2026-19541 |
medium | 6.5 | 0.0022 | 2026-10-16 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t | |
CVE-2026-64643 |
medium | 6.3 | 0.0051 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15 | |
CVE-2026-116689 |
medium | 5.9 | 0.0027 | 2026-10-27 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. Fr | |
CVE-2026-66822 |
medium | 5.9 | 0.0078 | 2026-10-13 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclos | |
CVE-2026-114190 |
medium | 5.9 | 0.0031 | 2026-10-24 | Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache Lite | |
CVE-2026-114173 |
medium | 5.3 | 0.0029 | 2026-10-29 | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded | |
CVE-2026-5512 |
medium | 5.3 | 0.0030 | 2026-04-21 | An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an a | |
CVE-2026-45215 |
medium | 5.3 | 0.0020 | 2026-05-12 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay | |
CVE-2026-59511 |
medium | 5.3 | 0.0033 | 2026-07-05 | Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Ele | |
CVE-2026-59519 |
medium | 5.3 | 0.0033 | 2026-07-05 | Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows Retr | |
CVE-2026-42505 |
medium | 5.3 | 0.0038 | 2026-07-08 | Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer du | |
CVE-2026-66683 |
medium | 5.3 | 0.0033 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. | |
CVE-2026-66684 |
medium | 5.3 | 0.0033 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. | |
CVE-2026-66685 |
medium | 5.3 | 0.0033 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions. | |
CVE-2026-48200 |
medium | 5.3 | — | 2026-10-29 | Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Li | |
CVE-2026-19601 |
medium | 4.9 | 0.0023 | 2026-10-16 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t | |
CVE-2026-20484 |
medium | 4.4 | 0.0016 | 2026-08-03 | In TFA, there is a possible information disclosure due to a missing permission check. This could lea | |
CVE-2024-47569 |
medium | 4.3 | 0.0047 | 2025-10-14 | A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 throug | |
CVE-2026-13211 |
medium | 4.3 | 0.0017 | 2026-07-01 | The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authenticati | |
CVE-2026-44970 |
medium | 4.3 | 0.0037 | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTr | |
CVE-2026-28144 |
medium | 4.3 | 0.0029 | 2026-07-31 | Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retri | |
CVE-2026-66696 |
medium | 4.3 | 0.0029 | 2026-08-06 | Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions. | |
CVE-2026-19603 |
medium | 4.3 | 0.0018 | 2026-10-16 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t | |
CVE-2026-12547 |
low | 3.4 | 0.0023 | 2026-07-21 | SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority | |
CVE-2026-34226 |
— | — | 0.0047 | 2026-03-27 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Vers | |
CVE-2026-39564 |
— | — | 0.0024 | 2026-04-08 | Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo | |
CVE-2026-42880 |
— | — | 0.0065 | 2026-05-07 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to bef | |
CVE-2026-114485 |
— | — | 0.0014 | 2026-10-22 | Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 20 |