Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69968 |
medium | 6.5 | 0.0086 | 2026-10-13 | Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o | |
CVE-2026-20078 |
medium | 6.5 | 0.0039 | 2026-04-15 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker&nbs | |
CVE-2026-20081 |
medium | 6.5 | 0.0039 | 2026-04-15 | Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker&nbs | |
CVE-2026-14903 |
medium | 6.5 | 0.0118 | 2026-07-14 | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker t | |
CVE-2026-58481 |
medium | 6.5 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` | |
CVE-2026-106490 |
medium | 6.5 | 0.0037 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin | |
CVE-2026-58413 |
medium | 6.1 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentMa | |
CVE-2026-7404 |
medium | 5.5 | 0.0051 | 2026-04-29 | A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the func | |
CVE-2026-41612 |
medium | 5.5 | 0.0050 | 2026-05-12 | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose informatio | |
CVE-2026-59995 |
medium | 5.4 | 0.0025 | 2026-07-08 | sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp | |
CVE-2026-59996 |
medium | 5.4 | 0.0025 | 2026-07-08 | scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when th | |
CVE-2026-114714 |
medium | 5.3 | 0.0037 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability | |
CVE-2026-44948 |
medium | 5.3 | 0.0049 | 2026-06-30 | A path traversal vulnerability was found in Fleet's ImageScan subsystem in Rancher Fleet 0.12.0 up t | |
CVE-2026-10720 |
medium | 5.1 | 0.0030 | 2026-06-19 | Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal is | |
CVE-2026-63303 |
medium | 5.1 | 0.0057 | 2026-07-28 | A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, | |
CVE-2026-31927 |
medium | 4.9 | 0.0035 | 2026-04-17 | Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overw | |
CVE-2026-47078 |
medium | 4.8 | 0.0015 | 2026-07-27 | Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside | |
CVE-2026-83865 |
medium | 4.7 | 0.0030 | 2026-10-13 | Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform t | |
CVE-2026-42085 |
medium | 4.3 | 0.0031 | 2026-05-04 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mor | |
CVE-2026-90727 |
low | 3.8 | 0.0026 | 2026-10-27 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-45188 |
low | 2.4 | 0.0015 | 2026-06-25 | Relative Path Traversal vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1. | |
CVE-2026-8387 |
low | 2.4 | 0.0042 | 2026-07-01 | A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path tr | |
CVE-2025-64446 |
— | — | 0.9108 | — | Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated | KEV |
CVE-2026-29201 |
— | — | 0.0043 | 2026-05-08 | Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call c | |
CVE-2026-34926 |
— | — | 0.1342 | — | Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pr | KEV |
CVE-2026-76519 |
— | — | 0.0215 | — | Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unau | KEV |