Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2660)
CWE-79 (1926)
CWE-416 (1558)
CWE-862 (1259)
CWE-122 (1130)
CWE-89 (1123)
CWE-125 (1089)
CWE-22 (1052)
CWE-306 (873)
CWE-200 (871)
CWE-20 (832)
CWE-787 (739)
CWE-78 (728)
CWE-918 (712)
CWE-863 (671)
CWE-94 (660)
CWE-74 (605)
CWE-639 (583)
CWE-400 (547)
CWE-269 (512)
CWE-119 (507)
CWE-502 (494)
CWE-287 (456)
CWE-770 (453)
CWE-121 (446)
CWE-190 (419)
CWE-362 (394)
CWE-77 (384)
CWE-476 (322)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-94140 |
critical | 9.1 | 0.0025 | 2026-10-21 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers becau | |
CVE-2026-94423 |
critical | 9.1 | 0.0027 | 2026-10-21 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect neve | |
CVE-2026-11745 |
high | 8.8 | 0.0022 | 2026-06-22 | A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, wher | |
CVE-2026-58065 |
high | 8.1 | 0.0074 | 2026-07-13 | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by | |
CVE-2026-44467 |
high | 7.4 | 0.0014 | 2026-05-13 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple s | |
CVE-2026-18654 |
medium | 6.9 | 0.0046 | 2026-08-03 | Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1 | |
CVE-2026-1354 |
medium | 5.9 | 0.0013 | 2026-04-21 | Zero Motorcycles firmware versions 44 and prior enable an attacker to forcibly pair a device with t |