Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2614)
CWE-79 (1799)
CWE-416 (1282)
CWE-862 (1170)
CWE-89 (1091)
CWE-22 (1018)
CWE-125 (867)
CWE-200 (841)
CWE-306 (832)
CWE-122 (826)
CWE-20 (789)
CWE-78 (702)
CWE-918 (685)
CWE-787 (677)
CWE-94 (637)
CWE-863 (604)
CWE-74 (600)
CWE-639 (535)
CWE-400 (513)
CWE-269 (499)
CWE-119 (494)
CWE-502 (467)
CWE-770 (433)
CWE-287 (424)
CWE-121 (404)
CWE-77 (372)
CWE-190 (362)
CWE-362 (321)
CWE-352 (271)
CWE-285 (241)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-111497 |
critical | 9.2 | 0.8264 | 2026-10-22 | Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated | KEV |
CVE-2026-40060 |
high | 8.7 | 0.0032 | 2026-05-13 | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed req | |
CVE-2026-11972 |
high | 8.2 | 0.0072 | 2026-06-23 | When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile modul | |
CVE-2026-62909 |
high | 7.8 | 0.0026 | 2026-08-11 | Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. | |
CVE-2026-34065 |
high | 7.5 | 0.0037 | 2026-04-22 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust | |
CVE-2026-110353 |
high | 7.5 | 0.0074 | 2026-10-22 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (work | |
CVE-2026-90648 |
high | 7.1 | 0.0019 | 2026-09-13 | wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily in | |
CVE-2026-118263 |
medium | 6.3 | 0.0039 | 2026-10-28 | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a Body | |
CVE-2026-98114 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing e | |
CVE-2026-98141 |
medium | 5.5 | 0.0010 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index i | |
CVE-2026-35344 |
low | 3.3 | 0.0011 | 2026-04-22 | The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditio | |
CVE-2026-56388 |
— | — | 0.0029 | 2026-10-21 | The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A re |