Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2612)
CWE-79 (1785)
CWE-416 (1279)
CWE-862 (1161)
CWE-89 (1089)
CWE-22 (1005)
CWE-125 (861)
CWE-200 (838)
CWE-306 (831)
CWE-122 (821)
CWE-20 (786)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (601)
CWE-74 (599)
CWE-639 (533)
CWE-400 (512)
CWE-269 (499)
CWE-119 (494)
CWE-770 (429)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (320)
CWE-352 (271)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-29129 |
critical | 9.8 | 0.0089 | 2023-06-13 | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < | |
CVE-2026-46389 |
critical | 9.8 | 0.0034 | 2026-06-05 | UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs | |
CVE-2026-41103 |
critical | 9.1 | 0.0538 | 2026-05-12 | Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluen | |
CVE-2026-50627 |
critical | 9.1 | 0.0452 | 2026-06-12 | The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of inc | |
CVE-2026-47300 |
high | 8.8 | 0.0078 | 2026-07-14 | Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker t | |
CVE-2026-50360 |
high | 8.8 | 0.0078 | 2026-07-14 | Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized atta | |
CVE-2026-0073 |
high | 8.8 | 0.0054 | 2026-05-04 | In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authenticatio | |
CVE-2026-41053 |
high | 8.8 | 0.0052 | 2026-06-30 | Incorrect authentication caching in the team member ship expansion of the Rancher Github authenticat | |
CVE-2026-49467 |
high | 8.8 | 0.0062 | 2026-08-12 | Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions | |
CVE-2026-43640 |
high | 8.6 | 0.0050 | 2026-05-11 | Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrievi | |
CVE-2023-25957 |
high | 7.5 | 0.0058 | 2023-03-14 | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < | |
CVE-2026-66028 |
high | 7.1 | 0.0061 | 2026-07-27 | Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerabili | |
CVE-2026-83906 |
medium | 6.5 | 0.0101 | 2026-10-13 | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacke | |
CVE-2026-57852 |
medium | 6.3 | 0.0069 | 2026-07-20 | Grav CMS scheduler-webhook plugin contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-12773 |
medium | 5.5 | 0.0102 | 2026-06-21 | A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyA | |
CVE-2026-33557 |
— | — | 0.0090 | 2026-04-20 | A possible security vulnerability has been identified in Apache Kafka. By default, the broker prope |