Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-88132 |
medium | 5.9 | 0.0032 | 2026-10-13 | Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information o | |
CVE-2026-77119 |
medium | 5.9 | 0.0023 | 2026-09-16 | A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgr | |
CVE-2026-119285 |
medium | 5.9 | — | 2026-10-29 | Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middlew | |
CVE-2026-82332 |
medium | 5.7 | 0.0012 | 2026-10-27 | An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authenti | |
CVE-2026-22077 |
medium | 5.6 | 0.0008 | 2026-04-27 | OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected | |
CVE-2026-6662 |
medium | 5.5 | 0.0018 | 2026-04-20 | A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the function | |
CVE-2026-113798 |
medium | 5.4 | 0.0024 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C | |
CVE-2026-114121 |
medium | 5.4 | 0.0022 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C | |
CVE-2026-66317 |
medium | 5.4 | 0.0021 | 2026-08-03 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor | |
CVE-2026-70309 |
medium | 5.4 | 0.0021 | 2026-08-28 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass | |
CVE-2026-57978 |
medium | 5.4 | 0.0021 | 2026-07-26 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor | |
CVE-2026-66316 |
medium | 5.4 | 0.0021 | 2026-08-03 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor | |
CVE-2026-113800 |
medium | 5.4 | 0.0024 | 2026-10-21 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and C | |
CVE-2026-118651 |
medium | 5.3 | 0.0021 | 2026-10-28 | Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-su | |
CVE-2026-96234 |
medium | 5.3 | 0.0033 | 2026-10-13 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a netwo | |
CVE-2023-4045 |
medium | 5.3 | 0.0059 | 2023-08-01 | Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access | |
CVE-2026-37977 |
medium | 5.3 | 0.0025 | 2026-04-06 | A flaw was found in Keycloak. A remote attacker can exploit a Cross-Origin Resource Sharing (CORS) h | |
CVE-2026-46611 |
medium | 5.3 | 0.0014 | 2026-06-25 | Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances XML-RPC | |
CVE-2026-34198 |
medium | 5.3 | 0.0017 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-15141 |
medium | 5.3 | 0.0018 | 2026-08-12 | The web interface of the affected device relies on the HTTP referrer header as part of request valid | |
CVE-2026-45021 |
medium | 5.1 | 0.0020 | 2026-05-28 | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs | |
CVE-2026-18676 |
medium | 5.1 | 0.0030 | 2026-08-12 | The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to | |
CVE-2026-101897 |
medium | 5.1 | 0.0035 | 2026-10-14 | Angular is a development platform for building mobile and desktop web applications using TypeScript/ | |
CVE-2026-59152 |
medium | 5.0 | 0.0020 | 2026-07-06 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an | |
CVE-2026-7439 |
medium | 4.8 | 0.0009 | 2026-04-29 | AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/valida | |
CVE-2026-35253 |
medium | 4.7 | 0.0015 | 2026-05-06 | Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versi | |
CVE-2026-13034 |
medium | 4.7 | 0.0020 | 2026-06-24 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a remote | |
CVE-2026-7979 |
medium | 4.3 | 0.0016 | 2026-05-06 | Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attac | |
CVE-2026-7986 |
medium | 4.3 | 0.0016 | 2026-05-06 | Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote | |
CVE-2026-13021 |
medium | 4.3 | 0.0020 | 2026-06-24 | Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.1 | |
CVE-2026-14039 |
medium | 4.3 | 0.0020 | 2026-06-30 | Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a re | |
CVE-2026-14046 |
medium | 4.3 | 0.0024 | 2026-06-30 | Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowe | |
CVE-2026-14053 |
medium | 4.3 | 0.0021 | 2026-06-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-14057 |
medium | 4.3 | 0.0024 | 2026-06-30 | Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14079 |
medium | 4.3 | 0.0024 | 2026-06-30 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14105 |
medium | 4.3 | 0.0023 | 2026-06-30 | Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-17662 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17693 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remo | |
CVE-2026-17731 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed | |
CVE-2026-17733 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a re | |
CVE-2026-17742 |
medium | 4.3 | 0.0021 | 2026-07-30 | Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17753 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17762 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17763 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in GPU in Google Chrome prior to 151.0.7922.72 allowed a remote attacke | |
CVE-2026-17765 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in WebProtect in Google Chrome prior to 151.0.7922.72 allowed a remote | |
CVE-2026-17775 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17777 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote at | |
CVE-2026-17783 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17788 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17798 |
medium | 4.3 | 0.0021 | 2026-07-30 | Inappropriate implementation in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attack |