Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-28461 |
— | — | 0.6808 | — | Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerabil | KEV |
CVE-2023-27351 |
— | — | 0.7805 | — | PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers t | KEV |
CVE-2023-35078 |
— | — | 1.0000 | — | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication | KEV |
CVE-2023-49105 |
— | — | 0.4319 | — | ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify | KEV |
CVE-2023-46805 |
— | — | 0.9998 | — | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateway | KEV |
CVE-2024-49039 |
— | — | 0.1418 | — | Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an att | KEV |
CVE-2024-53704 |
— | — | 0.9531 | — | SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mec | KEV |
CVE-2025-49706 |
— | — | 0.9906 | — | Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized att | KEV |
CVE-2025-61882 |
— | — | 0.9973 | — | Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration compon | KEV |
CVE-2025-61884 |
— | — | 0.9589 | — | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime c | KEV |
CVE-2026-48526 |
— | — | 0.0043 | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding J | |
CVE-2026-46817 |
— | — | 0.1231 | — | Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unaut | KEV |
CVE-2026-50751 |
— | — | 0.8534 | — | Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange | KEV |
CVE-2026-50559 |
— | — | 0.0102 | 2026-06-19 | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3 | |
CVE-2026-52845 |
— | — | 0.0044 | 2026-06-23 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_ | |
CVE-2026-12112 |
— | — | 0.0022 | 2026-06-23 | A flaw was found in the foreman-mcp-server. A session management vulnerability in the MCP Server all | |
CVE-2026-82329 |
— | — | 0.1437 | — | JFrog Artifactory contains an improper authentication vulnerability that under default configuration | KEV |
CVE-2026-20683 |
— | — | 0.0019 | 2026-09-14 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 | |
CVE-2026-43674 |
— | — | 0.0022 | 2026-09-14 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 | |
CVE-2026-65375 |
— | — | 0.0066 | 2026-09-14 | The issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27, m | |
CVE-2026-84606 |
— | — | 0.0041 | 2026-09-14 | A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 a | |
CVE-2026-84623 |
— | — | 0.0034 | 2026-09-14 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-86890 |
— | — | 0.0021 | 2026-09-14 | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, i | |
CVE-2026-84490 |
— | — | 0.0018 | 2026-10-20 | This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS | |
CVE-2026-48830 |
— | — | 0.0026 | 2026-10-21 | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to by | |
CVE-2026-86249 |
— | — | 0.0032 | 2026-10-21 | On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built- | |
CVE-2013-0625 |
— | — | 0.9376 | — | Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthori | KEV |