Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69247 |
high | 8.2 | 0.0027 | 2026-08-03 | cryptography is a package designed to expose cryptographic primitives and recipes to Python develope | |
CVE-2026-43873 |
high | 7.5 | 0.0032 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite | |
CVE-2026-42552 |
high | 7.5 | 0.0034 | 2026-05-13 | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine:: | |
CVE-2026-13182 |
high | 7.5 | 0.0050 | 2026-07-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can d | |
CVE-2026-3259 |
high | 7.1 | 0.0023 | 2026-04-23 | A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized Vie | |
CVE-2026-41935 |
high | 7.1 | 0.0027 | 2026-05-14 | Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispat | |
CVE-2026-113705 |
medium | 6.9 | 0.0033 | 2026-10-20 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown pro | |
CVE-2026-116478 |
medium | 6.9 | 0.0043 | 2026-10-26 | A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecu | |
CVE-2026-41931 |
medium | 6.9 | 0.0032 | 2026-05-06 | Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenti | |
CVE-2026-47248 |
medium | 6.9 | 0.0029 | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-64627 |
medium | 6.9 | 0.0047 | 2026-07-21 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.4 and versions before 8.6.85 contain a schema dis | |
CVE-2026-115496 |
medium | 6.9 | 0.0040 | 2026-10-22 | Overly informative error messages in the catalog functionality of KNIME Business Hub prior to versio | |
CVE-2025-40760 |
medium | 6.8 | 0.0014 | 2025-11-11 | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected produ | |
CVE-2026-47775 |
medium | 6.8 | 0.0022 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35 | |
CVE-2026-67080 |
medium | 6.5 | 0.0034 | 2026-10-28 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of er | |
CVE-2026-66306 |
medium | 6.5 | 0.0092 | 2026-09-08 | Generation of error message containing sensitive information in Skype for Business allows an unautho | |
CVE-2026-66008 |
medium | 6.3 | 0.0056 | 2026-07-24 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and | |
CVE-2026-66009 |
medium | 6.3 | 0.0044 | 2026-07-24 | Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL valid | |
CVE-2026-43630 |
medium | 6.3 | 0.0050 | 2026-08-06 | llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent mem | |
CVE-2026-44002 |
medium | 5.8 | 0.0024 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper class (intende | |
CVE-2023-33181 |
medium | 5.3 | 0.0054 | 2023-05-30 | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, som | |
CVE-2024-28765 |
medium | 5.3 | 0.0039 | 2026-05-27 | IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 cou | |
CVE-2026-116477 |
medium | 5.3 | 0.0032 | 2026-10-26 | A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impact | |
CVE-2026-116479 |
medium | 5.3 | 0.0032 | 2026-10-26 | A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage | |
CVE-2026-118272 |
medium | 5.3 | 0.0025 | 2026-10-28 | A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext | |
CVE-2026-118643 |
medium | 5.3 | 0.0026 | 2026-10-28 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execut | |
CVE-2026-40969 |
medium | 5.3 | 0.0020 | 2026-04-28 | The raw message of every server-side AuthenticationException is returned to the unauthenticated remo | |
CVE-2026-9794 |
medium | 5.3 | 0.0044 | 2026-05-28 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by s | |
CVE-2026-56568 |
medium | 5.3 | 0.0033 | 2026-07-31 | HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vul | |
CVE-2026-56571 |
medium | 5.3 | 0.0029 | 2026-07-31 | HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, nul | |
CVE-2026-47622 |
medium | 5.3 | 0.0046 | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause the generation of err | |
CVE-2026-53458 |
medium | 5.3 | 0.0045 | 2026-08-18 | Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5. | |
CVE-2026-3628 |
medium | 5.3 | 0.0027 | 2026-10-19 | IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. | |
CVE-2026-114348 |
medium | 5.3 | 0.0031 | 2026-10-22 | webpack-dev-server is a development server that provides live reloading for webpack projects. In ver | |
CVE-2026-101259 |
medium | 5.3 | 0.0034 | 2026-10-26 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP comp | |
CVE-2026-49979 |
medium | 5.1 | 0.0037 | 2026-06-24 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POS | |
CVE-2026-53906 |
medium | 5.1 | 0.0052 | 2026-07-01 | MCO is vulnerable to Path Disclosure and Path Traversal in file handling functionality related to da | |
CVE-2026-83786 |
medium | 4.7 | 0.0070 | 2026-10-13 | Generation of error message containing sensitive information in Windows NTFS allows an authorized at | |
CVE-2026-108316 |
medium | 4.3 | 0.0025 | 2026-10-27 | Tanium addressed an information disclosure vulnerability in Tanium Server. | |
CVE-2026-56620 |
medium | 4.3 | 0.0029 | 2026-08-10 | HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and | |
CVE-2026-4633 |
low | 3.7 | 0.0042 | 2026-03-23 | A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the i | |
CVE-2026-56537 |
low | 3.5 | 0.0027 | 2026-07-27 | HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive | |
CVE-2026-7860 |
low | 1.6 | 0.0012 | 2026-05-19 | A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle | |
CVE-2026-29146 |
— | — | 0.0885 | 2026-04-09 | Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This |