Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-54357 |
high | 8.7 | 0.0066 | 2026-06-19 | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unau | |
CVE-2026-56339 |
high | 8.7 | 0.0036 | 2026-07-15 | Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabas | |
CVE-2026-63567 |
high | 8.2 | 0.0045 | 2026-10-02 | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp befor | |
CVE-2026-63573 |
high | 8.2 | 0.0030 | 2026-10-02 | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation | |
CVE-2026-97788 |
high | 7.5 | 0.0088 | 2026-10-13 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack | |
CVE-2026-51926 |
high | 7.5 | 0.0062 | 2026-07-09 | An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain sensitive informati | |
CVE-2026-56316 |
medium | 6.9 | 0.0031 | 2026-06-21 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload | |
CVE-2026-56327 |
medium | 6.9 | 0.0034 | 2026-06-30 | Capgo before 12.128.2 contains an information disclosure vulnerability in the public.invite_user_to_ | |
CVE-2026-56296 |
medium | 6.9 | 0.0031 | 2026-07-11 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the public.transfer_app R | |
CVE-2026-64822 |
medium | 6.9 | 0.0042 | 2026-07-21 | djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPassword | |
CVE-2026-67193 |
medium | 6.9 | 0.0041 | 2026-07-29 | Xlight FTP Server before 3.9.5 contains an information disclosure vulnerability that allows unauthen | |
CVE-2026-97782 |
medium | 6.8 | 0.0053 | 2026-10-13 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampe | |
CVE-2023-25728 |
medium | 6.5 | 0.0067 | 2023-06-02 | The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to leak a child | |
CVE-2026-14071 |
medium | 6.5 | 0.0029 | 2026-06-30 | Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-111933 |
medium | 6.3 | 0.0022 | 2026-10-17 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains | |
CVE-2026-76406 |
medium | 5.9 | 0.0032 | 2026-10-21 | In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential dat | |
CVE-2026-65626 |
medium | 5.9 | 0.0009 | 2026-10-26 | The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding | |
CVE-2023-27464 |
medium | 5.3 | 0.0046 | 2023-04-11 | A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < | |
CVE-2026-14112 |
medium | 5.3 | 0.0026 | 2026-06-30 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-44332 |
medium | 5.3 | 0.0052 | 2026-07-08 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer fun | |
CVE-2026-65314 |
medium | 5.3 | 0.0039 | 2026-07-21 | Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that a | |
CVE-2026-59502 |
medium | 5.3 | 0.0033 | 2026-08-13 | : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed | |
CVE-2026-114064 |
medium | 5.1 | 0.0039 | 2026-10-21 | Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing fe | |
CVE-2023-5872 |
medium | 4.3 | 0.0032 | 2026-04-16 | In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate proje | |
CVE-2026-44263 |
medium | 4.3 | 0.0034 | 2026-05-07 | Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and compo | |
CVE-2026-18560 |
medium | 4.3 | 0.0018 | 2026-10-16 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to | |
CVE-2026-47011 |
low | 2.6 | 0.0022 | 2026-07-21 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Inte |