Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63509 |
critical | 9.9 | 0.0102 | 2026-08-20 | Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over | |
CVE-2026-66897 |
critical | 9.9 | 0.0072 | 2026-08-24 | A path traversal vulnerability in LXD's instance template processing allows an attacker with contain | |
CVE-2023-0745 |
critical | 9.8 | 0.0051 | 2023-02-09 | The High Availability functionality of Yugabyte Anywhere can be abused | |
CVE-2026-22070 |
critical | 9.8 | 0.0021 | 2026-04-30 | ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal. | |
CVE-2026-59792 |
critical | 9.8 | 0.0060 | 2026-07-10 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project wor | |
CVE-2026-41551 |
critical | 9.3 | 0.0049 | 2026-05-12 | A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a pat | |
CVE-2026-115812 |
critical | 9.3 | 0.0053 | 2026-10-23 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1. | |
CVE-2026-50663 |
high | 8.8 | 0.0094 | 2026-07-14 | Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacke | |
CVE-2026-56196 |
high | 8.8 | 0.0102 | 2026-07-14 | Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a | |
CVE-2026-83923 |
high | 8.8 | 0.0104 | 2026-10-13 | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over | |
CVE-2026-25707 |
high | 8.8 | 0.0060 | 2026-06-29 | A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 | |
CVE-2026-44941 |
high | 8.8 | 0.0053 | 2026-07-02 | A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 c | |
CVE-2026-55100 |
high | 8.7 | 0.0056 | 2026-07-31 | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src | |
CVE-2026-110690 |
high | 8.7 | 0.0090 | 2026-10-14 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability | |
CVE-2026-114110 |
high | 8.7 | 0.0035 | 2026-10-21 | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbi | |
CVE-2026-8100 |
high | 8.6 | 0.0055 | 2026-06-18 | Impact A security issue has been identified in Chef 360 that could allow unauthorized access to pro | |
CVE-2022-42476 |
high | 8.2 | 0.0022 | 2023-03-07 | A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2 | |
CVE-2026-33206 |
high | 8.2 | 0.0022 | 2026-03-27 | calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. | |
CVE-2026-33435 |
high | 8.0 | 0.0071 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filte | |
CVE-2026-70222 |
high | 7.8 | 0.0040 | 2026-10-13 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally | |
CVE-2026-65810 |
high | 7.8 | 0.0040 | 2026-08-11 | Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges loca | |
CVE-2026-83873 |
high | 7.8 | 0.0039 | 2026-10-13 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally | |
CVE-2026-59832 |
high | 7.7 | 0.0046 | 2026-07-09 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /snippets/*filepa | |
CVE-2026-54910 |
high | 7.7 | 0.0038 | 2026-07-20 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the | |
CVE-2026-49290 |
high | 7.6 | 0.0083 | 2026-06-19 | Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 C | |
CVE-2026-8361 |
high | 7.5 | 0.0043 | 2026-05-27 | A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path startin | |
CVE-2026-54066 |
high | 7.5 | 0.0217 | 2026-06-24 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-202 | |
CVE-2026-8023 |
high | 7.5 | 0.0087 | 2026-06-29 | Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE | |
CVE-2026-8650 |
high | 7.5 | 0.0060 | 2026-07-08 | Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This iss | |
CVE-2026-18907 |
high | 7.5 | 0.0091 | 2026-08-05 | Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary | |
CVE-2026-10595 |
high | 7.5 | 0.0062 | 2026-08-09 | A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catc | |
CVE-2026-66907 |
high | 7.5 | 0.0081 | 2026-08-24 | Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affect | |
CVE-2026-41046 |
high | 7.3 | 0.0019 | 2026-06-22 | A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed | |
CVE-2026-5966 |
high | 7.2 | 0.0041 | 2026-04-20 | ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authen | |
CVE-2026-57988 |
high | 7.1 | 0.0076 | 2026-07-03 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execut | |
CVE-2026-34026 |
high | 7.1 | 0.0039 | 2026-06-15 | Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains a path traversal vulnera | |
CVE-2026-57871 |
high | 7.1 | 0.0054 | 2026-07-07 | Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers | |
CVE-2026-55474 |
high | 7.1 | 0.0048 | 2026-07-10 | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig c | |
CVE-2026-18192 |
high | 7.1 | 0.0057 | 2026-07-29 | VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated r | |
CVE-2026-53416 |
high | 7.1 | 0.0021 | 2026-08-11 | Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information | |
CVE-2026-66881 |
high | 7.0 | 0.0061 | 2026-08-05 | Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook | |
CVE-2026-21082 |
medium | 6.9 | 0.0017 | 2026-08-10 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access se | |
CVE-2026-50426 |
medium | 6.8 | 0.0056 | 2026-07-14 | Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent | |
CVE-2026-58522 |
medium | 6.8 | 0.0043 | 2026-07-03 | Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in | |
CVE-2026-43616 |
medium | 6.8 | 0.0017 | 2026-05-04 | Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write | |
CVE-2026-15415 |
medium | 6.8 | 0.0035 | 2026-07-17 | AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow en | |
CVE-2026-39814 |
medium | 6.7 | 0.0014 | 2026-04-14 | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 thr | |
CVE-2026-68866 |
medium | 6.5 | 0.0022 | 2026-10-27 | PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.1 | |
CVE-2026-62837 |
medium | 6.5 | 0.0123 | 2026-08-11 | Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose inf | |
CVE-2026-69968 |
medium | 6.5 | 0.0086 | 2026-10-13 | Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o |