Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13599 |
medium | 5.8 | 0.0013 | 2026-10-22 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affe | |
CVE-2026-6369 |
medium | 5.7 | 0.0012 | 2026-04-20 | An improper access control vulnerability in the canonical-livepatch snap client prior to version 10. | |
CVE-2026-70137 |
medium | 5.5 | 0.0040 | 2026-10-13 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to | |
CVE-2026-96858 |
medium | 5.5 | 0.0046 | 2026-10-13 | Missing authentication for critical function in Windows Security Account Manager allows an authorize | |
CVE-2026-116604 |
medium | 5.5 | 0.0057 | 2026-10-27 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected eleme | |
CVE-2026-62879 |
medium | 5.5 | 0.0034 | 2026-10-13 | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to | |
CVE-2026-83854 |
medium | 5.5 | 0.0033 | 2026-10-13 | Improper access control in Windows Notification allows an authorized attacker to disclose informatio | |
CVE-2026-96183 |
medium | 5.5 | 0.0038 | 2026-10-13 | Missing authentication for critical function in Windows Health and Optimized Experiences Service all | |
CVE-2026-4959 |
medium | 5.5 | 0.0045 | 2026-03-27 | A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file | |
CVE-2026-6126 |
medium | 5.5 | 0.0040 | 2026-04-12 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is | |
CVE-2026-6129 |
medium | 5.5 | 0.0039 | 2026-04-12 | A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unk | |
CVE-2026-6577 |
medium | 5.5 | 0.0039 | 2026-04-19 | A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an | |
CVE-2026-6579 |
medium | 5.5 | 0.0043 | 2026-04-19 | A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown fun | |
CVE-2026-6582 |
medium | 5.5 | 0.0039 | 2026-04-19 | A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the fun | |
CVE-2026-7042 |
medium | 5.5 | 0.0038 | 2026-04-26 | A flaw has been found in 666ghj MiroFish up to 0.1.2. This affects the function create_app of the fi | |
CVE-2026-7714 |
medium | 5.5 | 0.0046 | 2026-05-04 | A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is | |
CVE-2026-7723 |
medium | 5.5 | 0.0042 | 2026-05-04 | A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file | |
CVE-2026-8031 |
medium | 5.5 | 0.0039 | 2026-05-06 | A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected elemen | |
CVE-2026-8737 |
medium | 5.5 | 0.0040 | 2026-05-17 | A weakness has been identified in Sanluan PublicCMS 5.202506.d. This issue affects the function exec | |
CVE-2026-12795 |
medium | 5.5 | 0.0080 | 2026-06-21 | A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps | |
CVE-2026-13546 |
medium | 5.5 | 0.0065 | 2026-06-29 | A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the f | |
CVE-2026-14622 |
medium | 5.5 | 0.0069 | 2026-07-04 | A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d | |
CVE-2026-14714 |
medium | 5.5 | 0.0078 | 2026-07-05 | A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.1.0. This issue affects the | |
CVE-2026-15192 |
medium | 5.5 | 0.0076 | 2026-07-09 | A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sen | |
CVE-2026-16210 |
medium | 5.5 | 0.0069 | 2026-07-19 | A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_acti | |
CVE-2026-60595 |
medium | 5.5 | 0.0015 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (com | |
CVE-2026-18990 |
medium | 5.5 | 0.0069 | 2026-08-06 | A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file | |
CVE-2026-114260 |
medium | 5.5 | 0.0055 | 2026-10-21 | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f | |
CVE-2026-116110 |
medium | 5.5 | 0.0041 | 2026-10-26 | A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some u | |
CVE-2026-39848 |
medium | 5.4 | 0.0011 | 2026-04-09 | Dockyard is a Docker container management app. Prior to 1.1.0, Docker container start and stop opera | |
CVE-2026-47671 |
medium | 5.4 | 0.0035 | 2026-07-21 | Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, | |
CVE-2026-72542 |
medium | 5.4 | 0.0030 | 2026-08-11 | A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated | |
CVE-2026-101433 |
medium | 5.3 | 0.0031 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test | |
CVE-2026-102816 |
medium | 5.3 | 0.0017 | 2026-10-27 | An authorization vulnerability exists in the country or region configuration interface of TP-Link RE | |
CVE-2026-56164 |
medium | 5.3 | 0.0101 | 2026-07-14 | Microsoft SharePoint contains a missing authentication for critical function vulnerability that allo | KEV 2 PoC |
CVE-2023-2187 |
medium | 5.3 | 0.0059 | 2023-06-07 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send | |
CVE-2026-40184 |
medium | 5.3 | 0.0024 | 2026-04-10 | TREK is a collaborative travel planner. Prior to 2.7.2, TREK served uploaded photos without requirin | |
CVE-2026-43881 |
medium | 5.3 | 0.0032 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/users.js | |
CVE-2026-8694 |
medium | 5.3 | 0.0022 | 2026-06-12 | Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthent | |
CVE-2026-50082 |
medium | 5.3 | 0.0027 | 2026-06-12 | The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address | |
CVE-2026-55605 |
medium | 5.3 | 0.0052 | 2026-07-09 | DeepSeek MCP Server is an MCP server for DeepSeek V4. Starting in version 1.4.2 and prior to version | |
CVE-2026-47769 |
medium | 5.3 | 0.0047 | 2026-07-23 | APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP | |
CVE-2026-71203 |
medium | 5.3 | 0.0031 | 2026-08-05 | changedetection.io's REST API resources are protected by an @auth.check_token decorator validating t | |
CVE-2026-18673 |
medium | 5.3 | 0.0046 | 2026-08-12 | When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, i | |
CVE-2026-77061 |
medium | 5.3 | 0.0033 | 2026-10-26 | boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated rem | |
CVE-2026-91476 |
medium | 5.3 | 0.0032 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (c | |
CVE-2026-60569 |
medium | 5.1 | 0.0015 | 2026-07-21 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supp | |
CVE-2026-87343 |
medium | 4.8 | 0.0021 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2024-5563 |
medium | 4.8 | 0.0019 | 2026-10-21 | Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even w | |
CVE-2026-61247 |
medium | 4.8 | 0.0027 | 2026-07-21 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific |