Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-44523 |
critical | 10.0 | 0.0015 | 2026-05-14 | Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy i | |
CVE-2026-44351 |
critical | 9.1 | 0.0025 | 2026-05-13 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authenticatio | |
CVE-2026-45363 |
critical | 9.1 | 0.0036 | 2026-07-14 | ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and | |
CVE-2026-9201 |
high | 8.8 | 0.0037 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary cod | |
CVE-2026-49852 |
high | 8.7 | 0.0017 | 2026-07-17 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry | |
CVE-2026-14868 |
high | 8.4 | 0.0006 | 2026-07-07 | The encryption algorithm used to protect the configuration of user accounts, stored in the built-in | |
CVE-2026-50044 |
high | 7.6 | 0.0013 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability | |
CVE-2026-33361 |
high | 7.5 | 0.0017 | 2026-05-11 | In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti | |
CVE-2023-29054 |
high | 7.4 | 0.0026 | 2023-04-11 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3 | |
CVE-2026-7830 |
high | 7.4 | 0.0029 | 2026-07-01 | UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbU | |
CVE-2026-114616 |
high | 7.4 | 0.0021 | 2026-10-22 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's | |
CVE-2026-63286 |
high | 7.1 | 0.0008 | 2026-10-28 | Database backups are vulnerable to offline attacks. Backups created using a version prior to the pat | |
CVE-2023-36748 |
medium | 6.8 | 0.0024 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2026-4648 |
medium | 6.8 | 0.0016 | 2026-07-28 | Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from | |
CVE-2026-35146 |
medium | 6.3 | 0.0019 | 2026-07-16 | HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits use | |
CVE-2026-83885 |
medium | 5.6 | 0.0021 | 2026-10-13 | Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an auth | |
CVE-2023-31135 |
medium | 5.5 | 0.0015 | 2023-05-17 | Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to | |
CVE-2026-5363 |
medium | 5.4 | 0.0009 | 2026-04-16 | Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allow | |
CVE-2026-65777 |
medium | 5.3 | 0.0036 | 2026-08-11 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a | |
CVE-2026-112026 |
low | 2.9 | 0.0020 | 2026-10-18 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d | |
CVE-2026-116054 |
low | 1.2 | 0.0021 | 2026-10-25 | A security vulnerability has been detected in SH3. This affects an unknown function of the component |