Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-18675 |
medium | 5.3 | 0.0056 | 2026-08-12 | The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid head | |
CVE-2024-28835 |
medium | 5.0 | 0.0039 | 2024-03-21 | A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to ve | |
CVE-2026-55517 |
medium | 4.3 | 0.0032 | 2026-06-23 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.5, a Deno program that opens | |
CVE-2026-34944 |
medium | 4.1 | 0.0023 | 2026-04-09 | Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, On x86-64 platfo | |
CVE-2026-27790 |
low | 2.7 | 0.0039 | 2026-07-07 | Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to t | |
CVE-2026-27844 |
low | 2.7 | 0.0039 | 2026-07-07 | Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface all | |
CVE-2026-55780 |
low | 2.4 | 0.0056 | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan | |
CVE-2026-33939 |
— | — | 0.0063 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-34986 |
— | — | 0.0065 | 2026-04-06 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards | |
CVE-2026-44001 |
— | — | 0.0045 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 | |
CVE-2026-65410 |
— | — | 0.0050 | 2026-09-14 | The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 2 | |
CVE-2026-82231 |
— | — | 0.0015 | 2026-10-21 | A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) ca |