Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-19327 |
low | 1.9 | 0.0020 | 2026-08-09 | A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnriche | |
CVE-2026-19328 |
low | 1.9 | 0.0017 | 2026-08-09 | A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getI | |
CVE-2026-19330 |
low | 1.9 | 0.0020 | 2026-08-09 | A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is t | |
CVE-2026-19331 |
low | 1.9 | 0.0020 | 2026-08-09 | A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function r | |
CVE-2026-19335 |
low | 1.9 | 0.0024 | 2026-08-09 | A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability a | |
CVE-2026-19338 |
low | 1.9 | 0.0017 | 2026-08-09 | A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is t | |
CVE-2026-19365 |
low | 1.9 | 0.0020 | 2026-08-09 | A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown | |
CVE-2026-19366 |
low | 1.9 | 0.0021 | 2026-08-09 | A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the | |
CVE-2026-19370 |
low | 1.9 | 0.0017 | 2026-08-09 | A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeF | |
CVE-2026-19371 |
low | 1.9 | 0.0020 | 2026-08-09 | A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function cop | |
CVE-2026-19372 |
low | 1.9 | 0.0021 | 2026-08-09 | A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by | |
CVE-2026-15791 |
low | 1.8 | 0.0025 | 2026-07-21 | A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp | |
CVE-2026-40000 |
low | 1.8 | 0.0020 | 2026-07-27 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is design | |
CVE-2026-7085 |
low | 1.3 | 0.0025 | 2026-04-27 | A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the | |
CVE-2026-8736 |
low | 0.9 | 0.0022 | 2026-05-17 | A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the fun | |
CVE-2026-41140 |
low | 0.6 | 0.0029 | 2026-04-24 | Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/u | |
CVE-2010-2861 |
— | — | 0.9975 | — | A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which al | KEV |
CVE-2018-0296 |
— | — | 0.9990 | — | Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTT | KEV |
CVE-2018-20250 |
— | — | 0.9600 | — | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution | KEV |
CVE-2019-19781 |
— | — | 1.0000 | — | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified | KEV |
CVE-2020-3452 |
— | — | 0.9999 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input | KEV |
CVE-2021-3199 |
— | — | 0.3024 | — | ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. s | KEV |
CVE-2021-21972 |
— | — | 0.9987 | — | VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Ser | KEV |
CVE-2021-27065 |
— | — | 0.9988 | — | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio | KEV |
CVE-2021-20023 |
— | — | 0.5169 | — | SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated at | KEV |
CVE-2021-40444 |
— | — | 0.9784 | — | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. | KEV |
CVE-2021-41277 |
— | — | 0.9718 | — | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read | KEV |
CVE-2022-27925 |
— | — | 0.9868 | — | Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an | KEV |
CVE-2022-30333 |
— | — | 0.9923 | — | RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to | KEV |
CVE-2022-37042 |
— | — | 0.9207 | — | Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxI | KEV |
CVE-2022-41352 |
— | — | 0.9548 | — | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio pac | KEV |
CVE-2023-26293 |
— | — | 0.0025 | 2023-04-11 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All ve | |
CVE-2023-38950 |
— | — | 0.9247 | — | ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthentica | KEV |
CVE-2023-41266 |
— | — | 0.8484 | — | Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to | KEV |
CVE-2023-47246 |
— | — | 0.9885 | — | SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execu | KEV |
CVE-2024-7399 |
— | — | 0.9194 | — | Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to w | KEV |
CVE-2024-41713 |
— | — | 0.9721 | — | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthor | KEV |
CVE-2024-11667 |
— | — | 0.0293 | — | Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that | KEV |
CVE-2024-55550 |
— | — | 0.3816 | — | Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker wi | KEV |
CVE-2024-57727 |
— | — | 0.9683 | — | SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unaut | KEV |
CVE-2025-61884 |
— | — | 0.9589 | — | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime c | KEV |
CVE-2025-8110 |
— | — | 0.8520 | — | Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutCon | KEV |
CVE-2026-4660 |
— | — | 0.0058 | 2026-04-09 | HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during | |
CVE-2025-61624 |
— | — | 0.0134 | — | FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that ma | KEV |
CVE-2026-40576 |
— | — | 0.0046 | 2026-04-21 | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vu | |
CVE-2026-40611 |
— | — | 0.0042 | 2026-04-21 | Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 cha | |
CVE-2026-40982 |
— | — | 0.0073 | 2026-05-07 | Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring- | |
CVE-2026-34909 |
— | — | 0.6803 | — | Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with a | KEV |
CVE-2026-20262 |
— | — | 0.2912 | — | Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow | KEV |
CVE-2026-44017 |
— | — | 0.0071 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th |