Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15747 |
critical | 9.1 | 0.0025 | 2026-07-14 | Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CS | |
CVE-2026-60007 |
critical | 9.1 | 0.0055 | 2026-08-04 | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable erro | |
CVE-2026-69519 |
high | 8.6 | 0.0103 | 2026-08-20 | Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose infor | |
CVE-2026-100164 |
high | 7.5 | 0.0030 | 2026-10-27 | Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry | |
CVE-2026-4113 |
high | 7.2 | 0.0036 | 2026-04-09 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a | |
CVE-2025-34155 |
medium | 6.9 | 0.0053 | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login f | |
CVE-2025-40806 |
medium | 6.9 | 0.0046 | 2025-12-09 | A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected appl | |
CVE-2026-53908 |
medium | 6.9 | 0.0036 | 2026-07-01 | MCO is vulnerable to User Enumeration through authentication-related functionalities. The applicatio | |
CVE-2026-61503 |
medium | 6.9 | 0.0044 | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depen | |
CVE-2026-66002 |
medium | 6.9 | 0.0082 | 2026-08-20 | Frappe is a full-stack web application framework. Prior to 15.115.0 and 16.27.0, the public request- | |
CVE-2026-111056 |
medium | 6.9 | 0.0029 | 2026-10-19 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the un | |
CVE-2026-34264 |
medium | 6.5 | 0.0027 | 2026-04-14 | During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns spec | |
CVE-2024-7478 |
medium | 5.8 | 0.0024 | 2026-10-21 | When a WSO2 product is configured to use an external user store, the system fails to adequately obsc | |
CVE-2023-27464 |
medium | 5.3 | 0.0046 | 2023-04-11 | A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < | |
CVE-2026-40485 |
medium | 5.3 | 0.0034 | 2026-04-18 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the public API log | |
CVE-2026-20195 |
medium | 5.3 | 0.0027 | 2026-05-06 | A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, | |
CVE-2026-44306 |
medium | 5.3 | 0.0021 | 2026-05-12 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.21 and 6.15.0, | |
CVE-2026-53947 |
medium | 5.3 | 0.0034 | 2026-06-24 | Ghost is a Node.js content management system. From 5.18.0 until 6.21.1, a discrepancy in responses f | |
CVE-2026-42218 |
medium | 5.3 | 0.0042 | 2026-07-20 | xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerabi | |
CVE-2026-14202 |
medium | 5.3 | 0.0033 | 2026-08-04 | Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUM | |
CVE-2026-55998 |
medium | 5.3 | 0.0034 | 2026-08-05 | The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the | |
CVE-2026-72588 |
medium | 5.3 | 0.0042 | 2026-08-10 | A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated | |
CVE-2026-49442 |
medium | 5.3 | 0.0024 | 2026-10-23 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User | |
CVE-2026-34319 |
medium | 5.0 | 0.0015 | 2026-04-21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported | |
CVE-2026-47083 |
medium | 4.3 | 0.0031 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an ESEARCH cross-user | |
CVE-2026-44753 |
low | 3.7 | 0.0035 | 2026-07-14 | SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted | |
CVE-2026-53422 |
low | 2.3 | 0.0026 | 2026-07-02 | Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authent |