Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2024-58367 |
high | 7.1 | 0.0036 | 2026-07-18 | SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, an | |
CVE-2026-112188 |
high | 7.1 | 0.0027 | 2026-10-19 | MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated u | |
CVE-2026-49338 |
high | 7.1 | 0.0029 | 2026-06-19 | gonic is a music streaming server / free-software subsonic server API implementation. Prior to versi | |
CVE-2026-48089 |
high | 7.1 | 0.0036 | 2026-06-19 | DevGuard provides vulnerability management for the full software supply chain. Prior to 1.4.2, on a | |
CVE-2026-56320 |
high | 7.1 | 0.0028 | 2026-06-30 | Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that accepts a c | |
CVE-2026-47726 |
high | 7.1 | 0.0030 | 2026-07-28 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to v | |
CVE-2026-70472 |
high | 7.1 | 0.0052 | 2026-08-04 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-72786 |
high | 7.1 | 0.0046 | 2026-08-12 | Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save | |
CVE-2026-115477 |
high | 7.1 | 0.0035 | 2026-10-23 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13. | |
CVE-2017-20238 |
high | 7.1 | 0.0024 | 2026-04-03 | Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an | |
CVE-2026-97324 |
medium | 6.9 | 0.0028 | 2026-09-24 | A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the | |
CVE-2026-116368 |
medium | 6.9 | 0.0058 | 2026-10-26 | A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown | |
CVE-2026-49278 |
medium | 6.7 | 0.0041 | 2026-06-24 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8 | |
CVE-2026-54683 |
medium | 6.5 | 0.0042 | 2026-10-15 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact wi | |
CVE-2023-28325 |
medium | 6.5 | 0.0039 | 2023-05-11 | An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to mani | |
CVE-2026-33954 |
medium | 6.5 | 0.0032 | 2026-03-27 | LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private not | |
CVE-2026-5283 |
medium | 6.5 | 0.0027 | 2026-04-01 | Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote atta | |
CVE-2026-5412 |
medium | 6.5 | 0.0044 | 2026-04-10 | In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. | |
CVE-2026-34315 |
medium | 6.5 | 0.0025 | 2026-04-21 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Serv | |
CVE-2026-33823 |
medium | 6.5 | 0.0072 | 2026-05-07 | Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over | |
CVE-2026-42202 |
medium | 6.5 | 0.0020 | 2026-05-08 | nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (PO | |
CVE-2026-55956 |
medium | 6.5 | 0.0069 | 2026-06-29 | Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for th | |
CVE-2026-58251 |
medium | 6.5 | 0.0046 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2026-58252 |
medium | 6.5 | 0.0046 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2026-61082 |
medium | 6.5 | 0.0019 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v | |
CVE-2026-72907 |
medium | 6.5 | 0.0044 | 2026-08-10 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, | |
CVE-2026-54624 |
medium | 6.5 | 0.0042 | 2026-08-20 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by | |
CVE-2026-104316 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's r | |
CVE-2026-91245 |
medium | 6.5 | 0.0036 | 2026-10-20 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime | |
CVE-2026-13490 |
medium | 6.3 | 0.0046 | 2026-06-28 | A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects t | |
CVE-2026-48115 |
medium | 6.3 | 0.0042 | 2026-08-03 | Misskey is an open source, federated social media platform. All Misskey servers running versions 202 | |
CVE-2026-114361 |
medium | 6.3 | 0.0040 | 2026-10-21 | A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the | |
CVE-2026-118173 |
medium | 6.1 | 0.0030 | 2026-10-27 | MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete valid | |
CVE-2026-60842 |
medium | 6.1 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Sear | |
CVE-2026-62444 |
medium | 6.1 | 0.0024 | 2026-07-21 | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component: Int | |
CVE-2026-70923 |
medium | 6.1 | 0.0024 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-14538 |
medium | 5.7 | 0.0020 | 2026-07-31 | An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql too | |
CVE-2026-42949 |
medium | 5.6 | 0.0022 | 2026-10-29 | A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): | |
CVE-2026-47053 |
medium | 5.6 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The | |
CVE-2026-114249 |
medium | 5.5 | 0.0030 | 2026-10-21 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03c | |
CVE-2026-5326 |
medium | 5.5 | 0.0040 | 2026-04-02 | A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is an unknow | |
CVE-2026-5642 |
medium | 5.5 | 0.0028 | 2026-04-06 | A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291 | |
CVE-2026-5842 |
medium | 5.5 | 0.0039 | 2026-04-09 | A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is | |
CVE-2026-6105 |
medium | 5.5 | 0.0031 | 2026-04-11 | A security vulnerability has been detected in perfree go-fastdfs-web up to 1.3.7. This affects an un | |
CVE-2026-7109 |
medium | 5.5 | 0.0029 | 2026-04-27 | A vulnerability was detected in code-projects Invoice System in Laravel 1.0. This impacts an unknown | |
CVE-2026-7505 |
medium | 5.5 | 0.0038 | 2026-04-30 | A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknow | |
CVE-2026-7644 |
medium | 5.5 | 0.0031 | 2026-05-02 | A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function add | |
CVE-2026-7681 |
medium | 5.5 | 0.0046 | 2026-05-03 | A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this | |
CVE-2026-7702 |
medium | 5.5 | 0.0031 | 2026-05-03 | A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function al | |
CVE-2026-14690 |
medium | 5.5 | 0.0050 | 2026-07-05 | A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. |