Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14778 |
medium | 5.5 | 0.0050 | 2026-07-06 | A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management | |
CVE-2026-44362 |
medium | 5.5 | 0.0018 | 2026-07-06 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel r | |
CVE-2026-15622 |
medium | 5.5 | 0.0059 | 2026-07-14 | A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file | |
CVE-2026-16126 |
medium | 5.5 | 0.0051 | 2026-07-18 | A vulnerability was determined in zevorn rt-claw up to 0.2.0. The impacted element is the function h | |
CVE-2026-16200 |
medium | 5.5 | 0.0050 | 2026-07-19 | A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_in | |
CVE-2026-43756 |
medium | 5.5 | 0.0016 | 2026-07-27 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.8, m | |
CVE-2026-43775 |
medium | 5.5 | 0.0015 | 2026-07-27 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Se | |
CVE-2026-18720 |
medium | 5.5 | 0.0048 | 2026-08-04 | A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of | |
CVE-2026-61718 |
medium | 5.4 | 0.0043 | 2026-07-16 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6 | |
CVE-2026-60152 |
medium | 5.4 | 0.0024 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane | |
CVE-2026-60911 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal | |
CVE-2026-60957 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: | |
CVE-2026-62563 |
medium | 5.4 | 0.0012 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-7145 |
medium | 5.3 | 0.0024 | 2026-04-27 | A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of | |
CVE-2026-41572 |
medium | 5.3 | 0.0024 | 2026-05-04 | Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owne | |
CVE-2026-8027 |
medium | 5.3 | 0.0029 | 2026-05-06 | A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is | |
CVE-2026-49397 |
medium | 5.3 | 0.0031 | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From | |
CVE-2026-56310 |
medium | 5.3 | 0.0023 | 2026-06-24 | Cap-go before 12.128.2 contains an authorization bypass vulnerability in the GET /organization/membe | |
CVE-2026-14793 |
medium | 5.3 | 0.0039 | 2026-07-06 | A vulnerability was detected in Craft CMS up to 4.18.0.1. Affected is the function actionReorderSets | |
CVE-2026-14794 |
medium | 5.3 | 0.0039 | 2026-07-06 | A flaw has been found in Craft CMS up to 4.18.0.1. Affected by this vulnerability is the function ac | |
CVE-2026-56240 |
medium | 5.3 | 0.0023 | 2026-07-11 | Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calcu | |
CVE-2026-15909 |
medium | 5.3 | 0.0037 | 2026-07-16 | A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3a | |
CVE-2026-16224 |
medium | 5.3 | 0.0039 | 2026-07-19 | A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown | |
CVE-2026-66488 |
medium | 5.3 | 0.0034 | 2026-07-29 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 | |
CVE-2026-23981 |
medium | 5.3 | 0.0056 | 2026-07-30 | An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user wit | |
CVE-2026-67332 |
medium | 5.3 | 0.0026 | 2026-08-01 | @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authoriza | |
CVE-2026-18818 |
medium | 5.3 | 0.0037 | 2026-08-04 | A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the functio | |
CVE-2026-19064 |
medium | 5.3 | 0.0037 | 2026-08-06 | A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. Thi | |
CVE-2026-19066 |
medium | 5.3 | 0.0037 | 2026-08-06 | A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0 | |
CVE-2026-17275 |
medium | 5.3 | 0.0019 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of d | |
CVE-2026-115803 |
medium | 5.3 | 0.0022 | 2026-10-24 | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServlet | |
CVE-2026-116274 |
medium | 5.3 | 0.0020 | 2026-10-26 | A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file ap | |
CVE-2026-116340 |
medium | 5.3 | 0.0030 | 2026-10-26 | A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileIn | |
CVE-2026-116384 |
medium | 5.3 | 0.0020 | 2026-10-26 | A weakness has been identified in Bdtask Garage 24 Garage Management Software 1.0. This vulnerabilit | |
CVE-2026-33522 |
medium | 5.3 | 0.0029 | 2026-10-26 | Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update se | |
CVE-2026-113694 |
medium | 5.3 | — | 2026-10-29 | Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite ver | |
CVE-2026-113696 |
medium | 5.3 | — | 2026-10-29 | Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite ver | |
CVE-2026-34321 |
medium | 4.8 | 0.0020 | 2026-04-21 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Ora | |
CVE-2023-22348 |
medium | 4.3 | 0.0059 | 2023-05-17 | Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows r | |
CVE-2026-40305 |
medium | 4.3 | 0.0018 | 2026-04-17 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft e | |
CVE-2026-34656 |
medium | 4.3 | 0.0039 | 2026-05-12 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier | |
CVE-2026-46700 |
medium | 4.3 | 0.0025 | 2026-07-07 | Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @a | |
CVE-2026-55664 |
medium | 4.3 | 0.0033 | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms | |
CVE-2026-49977 |
medium | 4.3 | 0.0035 | 2026-07-17 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.33.0, tarteaucitron.cookie. | |
CVE-2026-32819 |
medium | 4.3 | 0.0027 | 2026-07-20 | dataCycle is a data management system for centrally storing, managing, searching, finding, and distr | |
CVE-2026-70442 |
medium | 4.3 | 0.0027 | 2026-08-05 | Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate | |
CVE-2026-18144 |
medium | 4.3 | 0.0032 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrict | |
CVE-2026-17068 |
low | 3.3 | 0.0011 | 2026-10-16 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to | |
CVE-2026-5246 |
low | 2.9 | 0.0062 | 2026-04-02 | A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verif | |
CVE-2026-6572 |
low | 2.9 | 0.0032 | 2026-04-19 | A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this iss |