Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-43992 |
critical | 9.8 | 0.0022 | 2026-05-12 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write | |
CVE-2026-15721 |
critical | 9.8 | 0.0029 | 2026-08-04 | Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultan | |
CVE-2026-15065 |
critical | 9.1 | 0.0063 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass security r | |
CVE-2026-33867 |
critical | 9.1 | 0.0015 | 2026-03-27 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows co | |
CVE-2026-47702 |
critical | 9.1 | 0.0030 | 2026-08-11 | TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authent | |
CVE-2026-13380 |
critical | 9.0 | 0.0039 | 2026-07-20 | VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP response | |
CVE-2026-20312 |
high | 8.8 | 0.0031 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst | |
CVE-2026-8596 |
high | 8.5 | 0.0061 | 2026-05-14 | Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker P | |
CVE-2023-30367 |
high | 7.5 | 0.0048 | 2023-07-26 | Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to s | |
CVE-2026-6553 |
high | 7.3 | 0.0017 | 2026-04-21 | Changing backend users' passwords via the user settings module results in storing the cleartext pass | |
CVE-2026-21080 |
medium | 6.9 | 0.0017 | 2026-08-10 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent | |
CVE-2026-96293 |
medium | 6.9 | 0.0006 | 2026-10-22 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Di | |
CVE-2026-77054 |
medium | 6.9 | 0.0016 | 2026-10-26 | boneIO Black stores passwords, including the MQTT broker and web panel passwords, in cleartext. The | |
CVE-2026-6332 |
medium | 6.8 | 0.0013 | 2026-05-14 | CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclo | |
CVE-2026-55885 |
medium | 6.8 | 0.0022 | 2026-07-10 | Grav is a file-based Web platform. Prior to 1.7.53, an authenticated administrator with backup permi | |
CVE-2026-115400 |
medium | 6.7 | 0.0010 | 2026-10-22 | crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with | |
CVE-2026-28758 |
medium | 6.7 | 0.0008 | 2026-05-13 | When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST co | |
CVE-2026-42408 |
medium | 6.7 | 0.0008 | 2026-05-13 | When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command t | |
CVE-2026-66016 |
medium | 6.7 | 0.0012 | 2026-08-12 | Under specific self-hosted Helm configurations, generated TLS private keys may be retained in render | |
CVE-2026-114223 |
medium | 6.7 | 0.0008 | 2026-10-22 | NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Una | |
CVE-2026-116691 |
medium | 6.5 | 0.0021 | 2026-10-27 | MLflow is an open source AI engineering platform for agents, large language models, and machine lear | |
CVE-2026-16802 |
medium | 6.5 | 0.0010 | 2026-07-24 | Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Univer | |
CVE-2026-59244 |
medium | 6.5 | 0.0023 | 2026-08-12 | Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the | |
CVE-2026-68970 |
medium | 6.5 | 0.0023 | 2026-08-12 | Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so sec | |
CVE-2026-110200 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv | 1 PoC |
CVE-2026-8026 |
medium | 6.3 | 0.0026 | 2026-05-06 | A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Logi | |
CVE-2026-5224 |
medium | 5.7 | 0.0017 | 2026-08-18 | Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technolog | |
CVE-2026-61928 |
medium | 5.5 | 0.0023 | 2026-08-11 | Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform | |
CVE-2026-7163 |
medium | 5.5 | 0.0019 | 2026-04-30 | A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) | |
CVE-2026-6796 |
medium | 5.3 | 0.0015 | 2026-04-21 | A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_l | |
CVE-2026-55985 |
medium | 5.3 | 0.0019 | 2026-07-24 | The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credent | |
CVE-2026-65599 |
medium | 5.1 | 0.0025 | 2026-07-22 | n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when c | |
CVE-2026-16213 |
medium | 4.8 | 0.0011 | 2026-07-19 | A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vu | |
CVE-2026-34490 |
medium | 4.8 | 0.0010 | 2026-07-31 | Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on And | |
CVE-2026-50267 |
medium | 4.7 | 0.0006 | 2026-06-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cl | |
CVE-2026-59327 |
medium | 4.4 | 0.0010 | 2026-07-30 | Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secre | |
CVE-2026-57287 |
medium | 4.3 | 0.0019 | 2026-06-24 | Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encryp | |
CVE-2026-76376 |
medium | 4.3 | 0.0019 | 2026-08-19 | In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission | |
CVE-2026-76383 |
medium | 4.3 | 0.0021 | 2026-08-19 | In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who ho | |
CVE-2026-76384 |
medium | 4.3 | 0.0019 | 2026-08-19 | In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a | |
CVE-2026-77564 |
low | 3.3 | 0.0013 | 2026-10-14 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, ta | |
CVE-2026-45362 |
low | 3.2 | 0.0009 | 2026-05-12 | Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. | |
CVE-2026-18591 |
low | 0.9 | 0.0011 | 2026-08-03 | A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by | |
CVE-2023-22894 |
— | — | 0.0411 | — | Strapi contains a cleartext storage of sensitive information vulnerability that could allow attacker | KEV |
CVE-2026-43824 |
— | — | 0.0027 | 2026-05-02 | In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kuber | |
CVE-2011-4723 |
— | — | 0.0306 | — | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to ob | KEV |