Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2630)
CWE-79 (1805)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (612)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (426)
CWE-121 (404)
CWE-77 (372)
CWE-190 (364)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-44547 |
critical | 9.6 | 0.0026 | 2026-05-12 | ChurchCRM is an open-source church management system. From 7.2.0 to 7.2.2, The fix for CVE-2026-4058 | |
CVE-2026-61466 |
critical | 9.1 | 0.0071 | 2026-08-06 | In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and st | |
CVE-2026-49467 |
high | 8.8 | 0.0062 | 2026-08-12 | Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions | |
CVE-2026-67351 |
high | 8.7 | 0.0056 | 2026-07-30 | Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password v | |
CVE-2026-55957 |
high | 7.3 | 0.0285 | 2026-06-29 | Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was config | |
CVE-2026-113438 |
medium | 6.5 | 0.0024 | 2026-10-26 | Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specia | |
CVE-2026-61143 |
medium | 6.4 | 0.0031 | 2026-07-21 | Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communic | |
CVE-2026-40542 |
— | — | 0.0054 | 2026-04-22 | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the cli | |
CVE-2026-57915 |
— | — | 0.0053 | 2026-06-26 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA |