Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-41879 |
high | 8.2 | 0.0027 | 2026-07-10 | R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker | |
CVE-2026-8803 |
medium | 6.3 | 0.0018 | 2026-05-18 | A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the functi | |
CVE-2026-53692 |
medium | 5.9 | 0.0011 | 2026-06-30 | Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 | |
CVE-2026-10540 |
medium | 5.6 | 0.0011 | 2026-07-01 | The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, poten | |
CVE-2026-13455 |
medium | 4.3 | 0.0019 | 2026-06-30 | PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly c | |
CVE-2026-44582 |
low | 3.7 | 0.0022 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 | |
CVE-2026-7103 |
low | 2.9 | 0.0024 | 2026-04-27 | A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of | |
CVE-2026-13482 |
low | 2.9 | 0.0028 | 2026-06-28 | A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function usernam | |
CVE-2026-13510 |
low | 2.9 | 0.0031 | 2026-06-28 | A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unkn | |
CVE-2026-14738 |
low | 2.9 | 0.0031 | 2026-07-05 | A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image | |
CVE-2026-11329 |
low | 2.0 | 0.0008 | 2026-06-05 | A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the functi | |
CVE-2026-11330 |
low | 2.0 | 0.0008 | 2026-06-05 | A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the fu | |
CVE-2026-14630 |
low | 1.3 | 0.0023 | 2026-07-04 | A vulnerability has been found in ForceInjection AI-fundermentals 2.0/3.0. Affected by this vulnerab | |
CVE-2026-14742 |
low | 1.3 | 0.0023 | 2026-07-05 | A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the fu | |
CVE-2026-40164 |
— | — | 0.0037 | 2026-04-14 | jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used |