Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-5085 |
critical | 9.1 | 0.0034 | 2026-04-13 | Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSes | |
CVE-2026-9733 |
critical | 9.1 | 0.0052 | 2026-06-23 | Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state | |
CVE-2026-9219 |
high | 8.3 | 0.0035 | 2026-06-26 | Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable re | |
CVE-2026-13577 |
high | 8.2 | 0.0057 | 2026-07-20 | Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules ar | |
CVE-2026-85297 |
high | 7.7 | 0.0031 | 2026-10-26 | Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an | |
CVE-2026-46347 |
medium | 6.8 | 0.0025 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-5084 |
medium | 6.5 | 0.0033 | 2026-05-11 | WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session | |
CVE-2026-8503 |
medium | 6.5 | 0.0024 | 2026-05-15 | Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apac | |
CVE-2026-46346 |
medium | 6.5 | 0.0033 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-64964 |
medium | 6.3 | 0.0037 | 2026-08-20 | ATutor generates predictable email confirmation tokens due to the use of insufficiently random value | |
CVE-2026-28810 |
medium | 6.3 | 0.0027 | 2026-04-07 | Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel (inet_res, inet_ | |
CVE-2026-5080 |
medium | 5.9 | 0.0036 | 2026-04-30 | Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The se | |
CVE-2026-56016 |
medium | 5.9 | 0.0051 | 2026-07-01 | CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entrop | |
CVE-2026-79980 |
medium | 5.6 | 0.0017 | 2026-10-23 | The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->co | |
CVE-2026-9692 |
medium | 5.3 | 0.0042 | 2026-06-18 | Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The | |
CVE-2026-47085 |
medium | 4.0 | 0.0030 | 2026-07-16 | An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH token forgery can occur | |
CVE-2026-5081 |
— | — | 0.0030 | 2026-05-06 | Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are inse |