Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-59115 |
critical | 9.9 | 0.0102 | 2026-08-06 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to el | |
CVE-2026-52703 |
critical | 9.6 | 0.0044 | 2026-06-15 | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. | |
CVE-2026-6074 |
critical | 9.3 | 0.0055 | 2026-04-23 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the | |
CVE-2026-118633 |
critical | 9.2 | 0.0060 | 2026-10-28 | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as | |
CVE-2026-13716 |
critical | 9.1 | 0.0080 | 2026-08-11 | Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authent | |
CVE-2026-20034 |
high | 8.8 | 0.0071 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authe | |
CVE-2026-42661 |
high | 8.8 | 0.0038 | 2026-06-15 | Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. | |
CVE-2026-69109 |
high | 8.7 | 0.0062 | 2026-08-11 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affec | |
CVE-2026-42930 |
high | 8.5 | 0.0048 | 2026-05-13 | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be a | |
CVE-2026-25705 |
high | 8.4 | 0.0037 | 2026-05-13 | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.co | |
CVE-2025-48090 |
high | 8.1 | 0.0044 | 2025-11-06 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp a | |
CVE-2026-52707 |
high | 8.1 | 0.0049 | 2026-06-17 | Unauthenticated Local File Inclusion in Kastell <= 2.0 versions. | |
CVE-2026-42274 |
high | 7.8 | 0.0037 | 2026-05-08 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to versio | |
CVE-2026-49112 |
high | 7.5 | 0.0033 | 2026-06-15 | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. | |
CVE-2026-28157 |
high | 7.5 | 0.0041 | 2026-08-13 | Subscriber Path Traversal in Do Lasso <= 358 versions. | |
CVE-2026-0804 |
high | 7.3 | 0.0013 | 2026-05-12 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal at | |
CVE-2026-28265 |
high | 7.1 | 0.0012 | 2026-04-01 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker w | |
CVE-2026-24464 |
medium | 6.9 | 0.0089 | 2026-05-13 | When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iContro | |
CVE-2026-0205 |
medium | 6.8 | 0.0039 | 2026-04-29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with us | |
CVE-2026-49779 |
medium | 6.5 | 0.0044 | 2026-07-02 | Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal | |
CVE-2026-66695 |
medium | 6.5 | 0.0041 | 2026-08-06 | Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. | |
CVE-2025-8088 |
— | — | 0.9401 | — | RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This | KEV |