Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48758 |
medium | 5.4 | 0.0024 | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, th | |
CVE-2026-62757 |
medium | 5.3 | 0.0035 | 2026-08-11 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker | |
CVE-2026-44309 |
medium | 5.3 | 0.0014 | 2026-05-15 | Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Pr | |
CVE-2025-67903 |
medium | 5.3 | 0.0018 | 2026-05-27 | Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass. | |
CVE-2026-45795 |
medium | 5.3 | 0.0019 | 2026-07-16 | The Janssen Project is an open-source identity and access management (IAM) platform. Prior to 2.0.0, | |
CVE-2026-65632 |
medium | 5.1 | 0.0009 | 2026-10-26 | The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical l | |
CVE-2026-63237 |
medium | 4.8 | 0.0018 | 2026-07-29 | A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a | |
CVE-2026-87947 |
medium | 4.8 | 0.0014 | 2026-10-22 | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider | |
CVE-2026-88078 |
medium | 4.3 | — | 2026-10-29 | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauth | |
CVE-2026-103325 |
low | 3.7 | 0.0011 | 2026-10-27 | The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authe | |
CVE-2026-52686 |
low | 3.7 | 0.0016 | 2026-07-23 | The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are acc | |
CVE-2026-84918 |
low | 3.7 | 0.0016 | 2026-10-22 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows | |
CVE-2026-118774 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-13743 |
low | 3.3 | 0.0016 | 2026-07-02 | CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Veri | |
CVE-2026-6986 |
low | 2.9 | 0.0022 | 2026-04-25 | A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the fu | |
CVE-2026-7689 |
low | 2.9 | 0.0014 | 2026-05-03 | A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the | |
CVE-2026-48791 |
low | 2.0 | 0.0007 | 2026-08-13 | sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 | |
CVE-2026-110985 |
— | — | 0.0013 | 2026-10-28 | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.cla | |
CVE-2013-3900 |
— | — | 0.4465 | — | A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Win | KEV |
CVE-2026-33894 |
— | — | 0.0048 | 2026-03-27 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScrip | |
CVE-2026-33895 |
— | — | 0.0053 | 2026-03-27 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScrip | |
CVE-2026-40372 |
— | — | 0.1120 | 2026-04-21 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to | |
CVE-2026-48526 |
— | — | 0.0043 | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding J | |
CVE-2026-48558 |
— | — | 0.7766 | — | SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OID | KEV |
CVE-2026-11800 |
— | — | 0.0030 | 2026-06-25 | A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Gr | |
CVE-2026-5430 |
— | — | 0.2239 | — | WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vu | KEV |