Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (837)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-35671 |
high | 8.7 | 0.0038 | 2026-05-28 | phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API us | |
CVE-2026-72826 |
high | 8.7 | 0.0047 | 2026-08-14 | The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly create | |
CVE-2024-32009 |
high | 8.5 | 0.0012 | 2025-11-11 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The af | |
CVE-2026-57768 |
high | 8.2 | 0.0032 | 2026-07-13 | Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-regist | |
CVE-2026-73350 |
high | 8.2 | 0.0041 | 2026-08-18 | Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. | |
CVE-2026-11861 |
high | 8.1 | 0.0035 | 2026-08-20 | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Dire | |
CVE-2026-39587 |
high | 8.1 | 0.0028 | 2026-06-15 | Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. | |
CVE-2026-27543 |
high | 8.1 | 0.0037 | 2026-08-13 | Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. | |
CVE-2026-61979 |
high | 8.1 | 0.0042 | 2026-08-13 | Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. | |
CVE-2026-47237 |
high | 8.0 | 0.0039 | 2026-07-21 | Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clust | |
CVE-2026-8148 |
high | 7.8 | 0.0009 | 2026-05-08 | NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to | |
CVE-2026-66661 |
high | 7.7 | 0.0033 | 2026-08-13 | Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions. | |
CVE-2026-39546 |
high | 7.6 | 0.0029 | 2026-06-17 | Subscriber Privilege Escalation in MultiLoca <= 4.2.15 versions. | |
CVE-2026-47169 |
high | 7.5 | 0.0030 | 2026-06-11 | Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to | |
CVE-2026-49063 |
high | 7.3 | 0.0021 | 2026-06-15 | Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. | |
CVE-2026-22078 |
high | 7.3 | 0.0012 | 2026-06-29 | Because O+ Connect's IPC service does not authenticate clients, external applications can escalate p | |
CVE-2026-33518 |
high | 7.2 | 0.0029 | 2026-04-21 | An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and | |
CVE-2026-27407 |
high | 7.2 | 0.0039 | 2026-06-15 | Editor Privilege Escalation in AI Engine <= 3.4.9 versions. | |
CVE-2026-39470 |
high | 7.2 | 0.0038 | 2026-06-15 | Shop manager Privilege Escalation in WooCommerce Cart Abandonment Recovery < 2.1.0 versions. | |
CVE-2026-65559 |
high | 7.2 | 0.0046 | 2026-08-06 | Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions. | |
CVE-2026-35062 |
high | 7.1 | 0.0025 | 2026-05-13 | An authenticated iControl SOAP user may be able to obtain information of other accounts. Note: Sof | |
CVE-2026-12778 |
high | 7.1 | 0.0016 | 2026-06-21 | A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affect | |
CVE-2026-12779 |
high | 7.1 | 0.0016 | 2026-06-21 | A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unkno | |
CVE-2026-12780 |
high | 7.1 | 0.0016 | 2026-06-21 | A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in th | |
CVE-2026-12781 |
high | 7.1 | 0.0016 | 2026-06-21 | A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unk | |
CVE-2026-12782 |
high | 7.1 | 0.0016 | 2026-06-21 | A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is a | |
CVE-2026-12784 |
high | 7.1 | 0.0016 | 2026-06-21 | A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown fu | |
CVE-2026-12786 |
high | 7.1 | 0.0016 | 2026-06-21 | A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this i | |
CVE-2026-53902 |
high | 7.1 | 0.0034 | 2026-07-01 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-secti | |
CVE-2026-18606 |
high | 7.1 | 0.0016 | 2026-08-03 | A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is | |
CVE-2026-19189 |
high | 7.1 | 0.0016 | 2026-08-07 | A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is som | |
CVE-2026-19190 |
high | 7.1 | 0.0016 | 2026-08-07 | A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the | |
CVE-2026-19191 |
high | 7.1 | 0.0016 | 2026-08-07 | A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability af | |
CVE-2026-19192 |
high | 7.1 | 0.0016 | 2026-08-07 | A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown proc | |
CVE-2026-19193 |
high | 7.1 | 0.0016 | 2026-08-07 | A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in th | |
CVE-2026-19195 |
high | 7.1 | 0.0016 | 2026-08-07 | A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an un | |
CVE-2026-19381 |
high | 7.1 | 0.0016 | 2026-08-10 | A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacte | |
CVE-2026-97324 |
medium | 6.9 | 0.0028 | 2026-09-24 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the | |
CVE-2026-12529 |
medium | 6.9 | 0.0028 | 2026-06-17 | A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Pr | |
CVE-2026-116106 |
medium | 6.9 | 0.0035 | 2026-10-26 | A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulne | 1 PoC |
CVE-2026-116223 |
medium | 6.9 | 0.0034 | 2026-10-26 | A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of | |
CVE-2026-116368 |
medium | 6.9 | 0.0058 | 2026-10-26 | A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown | |
CVE-2026-54196 |
medium | 6.8 | 0.0024 | 2026-06-17 | Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalati | |
CVE-2026-15270 |
medium | 6.8 | 0.0085 | 2026-07-09 | A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability | |
CVE-2026-4629 |
medium | 6.5 | 0.0049 | 2026-06-30 | A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit | |
CVE-2026-68568 |
medium | 6.3 | 0.0026 | 2026-08-18 | Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions. | |
CVE-2026-114361 |
medium | 6.3 | 0.0040 | 2026-10-21 | A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the | |
CVE-2026-102851 |
medium | 6.1 | 0.0027 | 2026-10-13 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a secur | |
CVE-2026-114249 |
medium | 5.5 | 0.0030 | 2026-10-21 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03c | |
CVE-2026-5311 |
medium | 5.5 | 0.0103 | 2026-04-01 | A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-32 |