Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-20157 |
critical | 9.8 | 0.0019 | 2026-07-15 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS en | |
CVE-2026-21079 |
high | 7.0 | 0.0010 | 2026-08-10 | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attac | |
CVE-2026-111063 |
medium | 6.3 | 0.0023 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the | |
CVE-2026-53442 |
medium | 5.3 | 0.0018 | 2026-06-10 | Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml sub | |
CVE-2026-116198 |
medium | 5.3 | 0.0008 | 2026-10-25 | Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store tha | |
CVE-2026-115247 |
low | 2.1 | 0.0013 | 2026-10-22 | A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9e | |
CVE-2026-34486 |
— | — | 0.9850 | 2026-04-09 | Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass o | KEV |