Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56141 |
critical | 9.8 | 0.0052 | 2026-06-19 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 20 | |
CVE-2026-16235 |
critical | 9.8 | 0.0055 | 2026-07-20 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These ver | |
CVE-2026-9205 |
critical | 9.8 | 0.0030 | 2026-08-05 | IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key | |
CVE-2026-42155 |
critical | 9.3 | 0.0037 | 2026-05-15 | Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative t | |
CVE-2026-61500 |
critical | 9.3 | 0.0191 | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Ma | |
CVE-2026-5085 |
critical | 9.1 | 0.0034 | 2026-04-13 | Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSes | |
CVE-2026-11832 |
critical | 9.1 | 0.0033 | 2026-06-15 | Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The defa | |
CVE-2026-9733 |
critical | 9.1 | 0.0052 | 2026-06-23 | Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state | |
CVE-2026-7874 |
critical | 9.1 | 0.0027 | 2026-06-30 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due | |
CVE-2026-64798 |
critical | 9.1 | 0.0043 | 2026-07-22 | Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persistent URL | |
CVE-2026-73567 |
critical | 9.1 | 0.0044 | 2026-08-13 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and | |
CVE-2026-71851 |
critical | 9.0 | 0.0055 | 2026-08-07 | crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate | |
CVE-2026-41505 |
high | 8.7 | 0.0026 | 2026-05-07 | RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vulnerable to predictab | |
CVE-2026-8169 |
high | 8.7 | 0.0038 | 2026-07-20 | ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mo | |
CVE-2026-47882 |
high | 8.3 | 0.0024 | 2026-07-30 | When enabling Spring Boot DevTools support for a remote application target (for example a Docker con | |
CVE-2026-40514 |
high | 8.2 | 0.0015 | 2026-04-27 | SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email | |
CVE-2026-13577 |
high | 8.2 | 0.0057 | 2026-07-20 | Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules ar | |
CVE-2026-5088 |
high | 7.5 | 0.0057 | 2026-04-15 | Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. | |
CVE-2026-41564 |
high | 7.5 | 0.0043 | 2026-04-23 | CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Cry | |
CVE-2026-6659 |
high | 7.5 | 0.0045 | 2026-05-08 | Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The bui | |
CVE-2026-9638 |
high | 7.5 | 0.0031 | 2026-06-12 | Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These ve | |
CVE-2026-7830 |
high | 7.4 | 0.0029 | 2026-07-01 | UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbU | |
CVE-2026-5084 |
medium | 6.5 | 0.0033 | 2026-05-11 | WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session | |
CVE-2026-8503 |
medium | 6.5 | 0.0024 | 2026-05-15 | Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apac | |
CVE-2026-44040 |
medium | 6.5 | 0.0040 | 2026-07-01 | UltraVNC through 1.8.2.2 uses a cryptographically weak pseudo-random number generator to produce VNC | |
CVE-2026-102813 |
medium | 6.1 | 0.0020 | 2026-10-27 | An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verifi | |
CVE-2026-5080 |
medium | 5.9 | 0.0036 | 2026-04-30 | Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The se | |
CVE-2026-57082 |
medium | 5.9 | 0.0023 | 2026-06-30 | Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a no | |
CVE-2026-56016 |
medium | 5.9 | 0.0051 | 2026-07-01 | CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entrop | |
CVE-2026-6146 |
medium | 5.3 | 0.0017 | 2026-05-11 | Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon:: | |
CVE-2026-9692 |
medium | 5.3 | 0.0042 | 2026-06-18 | Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The | |
CVE-2026-13082 |
medium | 5.3 | 0.0031 | 2026-07-17 | GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method cr | |
CVE-2026-19742 |
low | 3.7 | 0.0025 | 2026-10-26 | The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifie |