Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-42155 |
critical | 9.3 | 0.0037 | 2026-05-15 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative t | |
CVE-2026-63149 |
critical | 9.1 | 0.0037 | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows att | |
CVE-2026-41505 |
high | 8.7 | 0.0026 | 2026-05-07 | RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictab | |
CVE-2026-55889 |
high | 8.3 | 0.0034 | 2026-10-23 | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed app | |
CVE-2026-33710 |
high | 7.5 | 0.0029 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, REST API keys are gene | |
CVE-2026-14570 |
high | 7.5 | 0.0051 | 2026-07-05 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased ra | |
CVE-2026-40306 |
medium | 6.9 | 0.0018 | 2026-04-17 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft e | |
CVE-2026-46347 |
medium | 6.8 | 0.0025 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-66391 |
medium | 6.5 | 0.0064 | 2026-07-27 | Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket. T | |
CVE-2026-71225 |
medium | 6.5 | 0.0034 | 2026-08-05 | A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs ( | |
CVE-2026-46346 |
medium | 6.5 | 0.0033 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-79981 |
medium | 6.5 | 0.0012 | 2026-10-23 | The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server whe | |
CVE-2026-47703 |
medium | 6.3 | 0.0014 | 2026-07-15 | AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Ho | |
CVE-2026-57082 |
medium | 5.9 | 0.0023 | 2026-06-30 | Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a no | |
CVE-2024-52615 |
medium | 5.3 | 0.0062 | 2024-11-21 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This | |
CVE-2026-18531 |
medium | 5.3 | 0.0038 | 2026-08-05 | IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session | |
CVE-2026-106074 |
medium | 4.8 | 0.0033 | 2026-10-23 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto | |
CVE-2026-114576 |
low | 2.9 | 0.0050 | 2026-10-22 | A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the | |
CVE-2026-14702 |
low | 1.1 | 0.0014 | 2026-07-05 | A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempF | |
CVE-2026-84606 |
— | — | 0.0041 | 2026-09-14 | A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 a |