Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2614)
CWE-79 (1799)
CWE-416 (1282)
CWE-862 (1166)
CWE-89 (1090)
CWE-22 (1016)
CWE-125 (867)
CWE-200 (839)
CWE-306 (831)
CWE-122 (825)
CWE-20 (788)
CWE-78 (701)
CWE-918 (684)
CWE-787 (676)
CWE-94 (636)
CWE-863 (602)
CWE-74 (600)
CWE-639 (534)
CWE-400 (513)
CWE-269 (499)
CWE-119 (494)
CWE-502 (466)
CWE-770 (430)
CWE-287 (424)
CWE-121 (404)
CWE-77 (371)
CWE-190 (361)
CWE-362 (321)
CWE-352 (271)
CWE-285 (241)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-34236 |
critical | 9.8 | 0.0022 | 2026-04-01 | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From version 8.0.0 to before ve | |
CVE-2026-42155 |
critical | 9.3 | 0.0037 | 2026-05-15 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative t | |
CVE-2026-71851 |
critical | 9.0 | 0.0055 | 2026-08-07 | crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate | |
CVE-2026-2336 |
high | 8.7 | 0.0023 | 2026-04-16 | A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user | |
CVE-2026-4827 |
high | 8.7 | 0.0031 | 2026-05-12 | CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an at | |
CVE-2026-11403 |
high | 8.7 | 0.0053 | 2026-07-14 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow | |
CVE-2026-92209 |
high | 7.8 | 0.0024 | 2026-10-21 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability | |
CVE-2026-46474 |
high | 7.5 | 0.0032 | 2026-05-15 | Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using | |
CVE-2026-8700 |
high | 7.3 | 0.0036 | 2026-05-15 | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl | |
CVE-2026-4930 |
high | 7.1 | 0.0014 | 2026-06-25 | SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates | |
CVE-2026-7210 |
medium | 6.3 | 0.0067 | 2026-05-11 | `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding pro | |
CVE-2026-13199 |
medium | 5.1 | 0.0016 | 2026-07-07 | EEPROM firmware on Raspberry Pi 5 and Compute Module 5 devices produced non-random KASLR and RNG see | |
CVE-2026-4932 |
medium | 4.6 | 0.0011 | 2026-07-28 | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an a |