Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15925 |
critical | 9.2 | 0.0018 | 2026-07-16 | Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.1 | |
CVE-2026-48144 |
critical | 9.1 | 0.0040 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings | |
CVE-2026-48145 |
high | 8.2 | 0.0042 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. | |
CVE-2026-22747 |
high | 8.1 | 0.0024 | 2026-04-22 | Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle cer | |
CVE-2026-86410 |
high | 8.1 | 0.0025 | 2026-10-20 | A flaw in the curl command line tool's logic makes it only set SSH host verification options when in | |
CVE-2026-42790 |
high | 7.6 | 0.0034 | 2026-05-27 | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key m | |
CVE-2026-65942 |
high | 7.5 | 0.0059 | 2026-08-10 | TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0. Users are recomme | |
CVE-2026-44467 |
high | 7.4 | 0.0014 | 2026-05-13 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple s | |
CVE-2026-53583 |
medium | 6.5 | 0.0024 | 2026-08-20 | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a | |
CVE-2026-34477 |
medium | 6.3 | 0.0056 | 2026-04-10 | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: | |
CVE-2026-58040 |
medium | 6.3 | 0.0028 | 2026-07-30 | An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verif | |
CVE-2026-66053 |
medium | 5.9 | 0.0029 | 2026-07-27 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings | |
CVE-2026-12162 |
medium | 5.5 | 0.0015 | 2026-06-16 | Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager | |
CVE-2026-91769 |
medium | 4.3 | 0.0016 | 2026-09-25 | PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, wh | |
CVE-2026-12730 |
low | 3.8 | 0.0017 | 2026-08-05 | IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fi | |
CVE-2026-54275 |
low | 2.7 | 0.0047 | 2026-06-22 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the | |
CVE-2026-43869 |
— | — | 0.0063 | 2026-05-05 | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue af | |
CVE-2026-66392 |
— | — | 0.0010 | 2026-10-21 | Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verifi |