Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-50086 |
critical | 9.8 | 0.0029 | 2026-06-12 | The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the p | |
CVE-2026-46395 |
critical | 9.3 | 0.0029 | 2026-06-05 | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `h | |
CVE-2026-8072 |
critical | 9.2 | 0.0015 | 2026-05-12 | Insecure generation of credentials in the local SAT (Technical Support) access functionality of the | |
CVE-2026-108014 |
critical | 9.1 | 0.0013 | 2026-10-27 | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.w | |
CVE-2026-108015 |
critical | 9.1 | 0.0013 | 2026-10-27 | Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.w | |
CVE-2026-34950 |
critical | 9.1 | 0.0024 | 2026-04-06 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.1.0 and earlier, the publicKeyPemMa | |
CVE-2026-44699 |
critical | 9.1 | 0.0026 | 2026-05-15 | LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not c | |
CVE-2026-8470 |
critical | 9.1 | 0.0011 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through | |
CVE-2026-91403 |
critical | 9.1 | 0.0037 | 2026-10-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-114820 |
critical | 9.1 | 0.0025 | 2026-10-24 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-9221 |
high | 8.7 | 0.0026 | 2026-06-26 | The Setracker2 Android Companion App (com.tgelec.setracker) versions 3.1.5 and earlier uses MD5 to g | |
CVE-2026-118684 |
high | 8.2 | 0.0019 | 2026-10-28 | MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() tha | |
CVE-2026-32959 |
high | 8.2 | 0.0021 | 2026-04-20 | SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a use of a broken | |
CVE-2026-29129 |
high | 7.5 | 0.0026 | 2026-04-09 | Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue affects | |
CVE-2026-56454 |
high | 7.5 | 0.0022 | 2026-07-16 | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TL | |
CVE-2023-36749 |
high | 7.4 | 0.0029 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2026-6411 |
high | 7.3 | 0.0016 | 2026-05-07 | This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an | |
CVE-2026-59116 |
medium | 6.8 | 0.0040 | 2026-10-13 | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized at | |
CVE-2026-47775 |
medium | 6.8 | 0.0022 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35 | |
CVE-2026-5926 |
medium | 6.5 | 0.0018 | 2026-04-23 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10 | |
CVE-2026-56609 |
medium | 6.5 | 0.0015 | 2026-08-03 | HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the a | |
CVE-2026-5588 |
medium | 6.3 | 0.0078 | 2026-04-15 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. B | |
CVE-2026-8803 |
medium | 6.3 | 0.0018 | 2026-05-18 | A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the functi | |
CVE-2026-57997 |
medium | 6.3 | 0.0025 | 2026-06-29 | Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt. | |
CVE-2026-16458 |
medium | 5.9 | 0.0009 | 2026-08-13 | Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since | |
CVE-2026-16459 |
medium | 5.9 | 0.0009 | 2026-08-13 | Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all vers | |
CVE-2026-3161 |
medium | 5.9 | 0.0017 | 2026-10-19 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that co | |
CVE-2024-28834 |
medium | 5.3 | 0.0072 | 2024-03-21 | A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits determ | |
CVE-2026-40641 |
medium | 4.8 | 0.0010 | 2026-06-17 | Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptogr | |
CVE-2026-56582 |
low | 3.1 | 0.0015 | 2026-07-21 | HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerab | |
CVE-2026-7103 |
low | 2.9 | 0.0024 | 2026-04-27 | A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of | |
CVE-2026-13482 |
low | 2.9 | 0.0028 | 2026-06-28 | A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function usernam | |
CVE-2026-13510 |
low | 2.9 | 0.0031 | 2026-06-28 | A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unkn | |
CVE-2026-14738 |
low | 2.9 | 0.0031 | 2026-07-05 | A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image | |
CVE-2026-11329 |
low | 2.0 | 0.0008 | 2026-06-05 | A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the functi | |
CVE-2026-11330 |
low | 2.0 | 0.0008 | 2026-06-05 | A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the fu | |
CVE-2026-50268 |
low | 1.9 | 0.0005 | 2026-06-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cl | |
CVE-2026-14630 |
low | 1.3 | 0.0023 | 2026-07-04 | A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerab | |
CVE-2026-14742 |
low | 1.3 | 0.0023 | 2026-07-05 | A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the fu |