Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48781 |
critical | 9.9 | 0.0021 | 2026-06-17 | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration cal | |
CVE-2026-47303 |
high | 8.8 | 0.0084 | 2026-07-14 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to ele | |
CVE-2026-40285 |
high | 8.8 | 0.0032 | 2026-04-17 | WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection | |
CVE-2026-50528 |
high | 8.2 | 0.0061 | 2026-07-14 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a | |
CVE-2026-5423 |
high | 8.2 | 0.0059 | 2026-08-06 | @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, | |
CVE-2026-48117 |
medium | 6.8 | 0.0018 | 2026-06-17 | DroneAware is a drone detection platform. The centralized DroneAware server backing droneaware.io wa | |
CVE-2026-80092 |
medium | 5.3 | 0.0062 | 2026-10-16 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attac |