Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-4670 |
critical | 9.8 | 0.0504 | 2026-04-30 | Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allow | |
CVE-2026-10539 |
critical | 9.5 | 0.0042 | 2026-07-01 | A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied inpu | |
CVE-2026-41052 |
critical | 9.4 | 0.0042 | 2026-06-29 | Improper privilege handling could be used by users with Project Owner role to escalate privileges, i | |
CVE-2026-40582 |
critical | 9.1 | 0.0050 | 2026-04-18 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the /api/public/us | |
CVE-2026-19292 |
high | 8.8 | 0.0035 | 2026-08-13 | Re-pairing with a legitimate device can use a lower security level than previous making brute-forcin | |
CVE-2026-65935 |
high | 7.6 | 0.0025 | 2026-08-13 | Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating | |
CVE-2026-40039 |
high | 7.1 | 0.0034 | 2026-04-13 | Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to a | |
CVE-2026-10537 |
medium | 6.9 | 0.0029 | 2026-10-27 | A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Serve | |
CVE-2023-27535 |
medium | 5.9 | 0.0180 | 2023-03-30 | An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature | |
CVE-2023-27536 |
medium | 5.9 | 0.0176 | 2023-03-30 | An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which c | |
CVE-2026-20152 |
medium | 5.3 | 0.0030 | 2026-04-15 | A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web | |
CVE-2026-33892 |
medium | 5.1 | 0.0021 | 2026-04-14 | A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V | |
CVE-2026-9798 |
medium | 4.3 | 0.0037 | 2026-05-28 | A flaw was found in Keycloak, an open-source identity and access management solution. When a user ac | |
CVE-2026-6266 |
— | — | 0.0040 | 2026-05-04 | A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatical | |
CVE-2026-81578 |
— | — | 0.8373 | — | PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an | KEV |
CVE-2026-114230 |
— | — | — | 2026-10-29 | When dispatching SASL frames to authenticate the peer, Proton will also dispatch AMQP frames if they |