Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40430 |
high | 8.7 | 0.0039 | 2026-07-23 | Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability | |
CVE-2026-55765 |
high | 8.5 | 0.0050 | 2026-08-20 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. | |
CVE-2026-46513 |
high | 7.4 | 0.0043 | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API t | |
CVE-2026-110975 |
high | 7.4 | 0.0025 | 2026-10-23 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the end | |
CVE-2026-50641 |
high | 7.1 | 0.0024 | 2026-07-29 | Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database Thi | |
CVE-2026-103094 |
high | 7.1 | — | 2026-10-29 | ServiceNow has remediated an information disclosure vulnerability that was identified in the Service | |
CVE-2026-14867 |
medium | 6.8 | 0.0013 | 2026-07-07 | Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all ver | |
CVE-2026-41874 |
medium | 6.8 | 0.0018 | 2026-07-28 | Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows | |
CVE-2026-6500 |
medium | 4.8 | 0.0010 | 2026-05-04 | Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embed | |
CVE-2026-57302 |
medium | 4.3 | 0.0028 | 2026-06-24 | Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the | |
CVE-2026-44187 |
low | 3.3 | 0.0013 | 2026-07-22 | A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allo | |
CVE-2026-50268 |
low | 1.9 | 0.0005 | 2026-06-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cl |