Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41900 |
critical | 10.0 | 0.0091 | 2026-05-08 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3 | |
CVE-2026-72508 |
critical | 9.9 | 0.0081 | 2026-08-12 | A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Mana | |
CVE-2026-70496 |
critical | 9.9 | 0.0055 | 2026-08-19 | A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a c | |
CVE-2026-12027 |
critical | 9.6 | 0.0022 | 2026-06-11 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote a | |
CVE-2026-23559 |
critical | 9.4 | 0.0017 | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti | |
CVE-2026-23560 |
critical | 9.4 | 0.0017 | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti | |
CVE-2026-23561 |
critical | 9.4 | 0.0017 | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti | |
CVE-2026-23562 |
critical | 9.4 | 0.0017 | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti | |
CVE-2026-42486 |
critical | 9.4 | 0.0017 | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabiliti | |
CVE-2026-42833 |
critical | 9.1 | 0.0075 | 2026-05-12 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) al | |
CVE-2025-30046 |
critical | 9.0 | 0.0026 | 2026-10-23 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with ex | |
CVE-2026-50737 |
critical | 9.0 | 0.0040 | 2026-07-28 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates | |
CVE-2026-59133 |
high | 8.8 | 0.0091 | 2026-08-11 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an a | |
CVE-2026-48584 |
high | 8.8 | 0.0091 | 2026-06-19 | Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate priv | |
CVE-2026-18949 |
high | 8.8 | 0.0066 | 2026-08-10 | A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the da | |
CVE-2026-17110 |
high | 8.8 | 0.0075 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary comman | |
CVE-2026-18669 |
high | 8.8 | 0.0075 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code | |
CVE-2026-104795 |
high | 8.8 | 0.0016 | 2026-10-14 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container | |
CVE-2026-46748 |
high | 8.7 | 0.0021 | 2026-06-09 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected sy | |
CVE-2026-29205 |
high | 8.6 | 0.0837 | 2026-05-13 | Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the | |
CVE-2026-33793 |
high | 8.5 | 0.0016 | 2026-04-09 | An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Network | |
CVE-2026-32643 |
high | 8.5 | 0.0016 | 2026-05-13 | A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacke | |
CVE-2026-32673 |
high | 8.5 | 0.0024 | 2026-05-13 | A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the | |
CVE-2026-42088 |
high | 8.1 | 0.0034 | 2026-05-04 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mor | |
CVE-2026-25908 |
high | 7.8 | 0.0009 | 2026-04-27 | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecess | |
CVE-2026-3623 |
high | 7.8 | 0.0015 | 2026-05-27 | IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with | |
CVE-2026-14985 |
high | 7.8 | 0.0017 | 2026-07-22 | The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation v | |
CVE-2026-24183 |
high | 7.8 | 0.0018 | 2026-08-18 | NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivilege | |
CVE-2026-15584 |
high | 7.5 | 0.0042 | 2026-07-13 | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool | |
CVE-2026-4667 |
high | 7.3 | 0.0010 | 2026-04-15 | HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an u | |
CVE-2026-48098 |
high | 7.3 | 0.0019 | 2026-08-07 | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a use | |
CVE-2026-25710 |
high | 7.0 | 0.0013 | 2026-05-13 | The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from mu | |
CVE-2026-13104 |
high | 7.0 | 0.0016 | 2026-07-16 | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese m | |
CVE-2026-40550 |
medium | 6.9 | 0.0012 | 2026-04-28 | Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database privilege | |
CVE-2026-40638 |
medium | 6.7 | 0.0012 | 2026-05-12 | Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary priv | |
CVE-2026-17445 |
medium | 6.5 | 0.0041 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrict | |
CVE-2026-71846 |
medium | 6.5 | 0.0016 | 2026-08-12 | A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granti | |
CVE-2026-87709 |
medium | 5.5 | 0.0031 | 2026-10-13 | Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta | |
CVE-2026-11626 |
medium | 5.4 | 0.0011 | 2026-06-10 | CleanWipe Removal Tool (macOS), prior to 16.0.0.65, may be susceptible to an Local Privilege Escalat | |
CVE-2026-47190 |
medium | 4.4 | 0.0033 | 2026-06-12 | IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, an | |
CVE-2026-54319 |
medium | 4.2 | 0.0024 | 2026-06-23 | Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent wor | |
CVE-2026-22008 |
low | 3.7 | 0.0021 | 2026-04-21 | Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is | |
CVE-2026-91335 |
low | 2.6 | 0.0021 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ |