Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-93629 |
medium | 5.3 | 0.0027 | 2026-10-23 | An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthentica | |
CVE-2026-118653 |
medium | 5.3 | 0.0042 | 2026-10-28 | Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-F | |
CVE-2026-34025 |
medium | 5.3 | 0.0028 | 2026-06-15 | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains an IP restriction by | |
CVE-2026-45045 |
medium | 5.3 | 0.0046 | 2026-07-08 | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0 and 2.52.14, the BalancerFo | |
CVE-2026-32469 |
medium | 5.3 | 0.0033 | 2026-08-06 | Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions. | |
CVE-2026-13984 |
medium | 4.3 | 0.0024 | 2026-06-30 | Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-115962 |
medium | 4.3 | — | 2026-10-29 | Authentication Bypass by Spoofing vulnerability in myCred myCred mycred allows Identity Spoofing.Thi | |
CVE-2026-54478 |
low | 3.7 | 0.0024 | 2026-07-22 | In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-p | |
CVE-2025-13015 |
low | 3.4 | 0.0023 | 2025-11-11 | Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firef | |
CVE-2026-39419 |
low | 3.1 | 0.0022 | 2026-04-14 | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authenticated u | |
CVE-2026-49231 |
low | 2.3 | 0.0057 | 2026-06-19 | Authentication Bypass by Spoofing vulnerability in opa plugin. An attacker could relay spoofed iden | |
CVE-2026-62224 |
low | 2.3 | 0.0026 | 2026-07-17 | OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom | |
CVE-2026-16076 |
low | 2.1 | 0.0051 | 2026-07-18 | A vulnerability has been found in AstrBotDevs AstrBot up to 4.25.5. This issue affects the function | |
CVE-2026-0292 |
low | 2.1 | 0.0019 | 2026-08-13 | An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Ag | |
CVE-2023-50224 |
— | — | 0.2002 | — | TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd servi | KEV |
CVE-2026-7507 |
— | — | 0.0084 | 2026-05-19 | A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated | |
CVE-2026-52845 |
— | — | 0.0044 | 2026-06-23 | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_ | |
CVE-2026-65399 |
— | — | 0.0012 | 2026-09-14 | A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and i | |
CVE-2026-104935 |
— | — | 0.8677 | — | Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remo | KEV |
CVE-2026-102764 |
— | — | 0.1895 | — | BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could al | KEV |