Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96374 |
medium | 4.2 | 0.0010 | 2026-10-22 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request | |
CVE-2026-114719 |
low | 3.7 | 0.0025 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in th | |
CVE-2026-47000 |
low | 3.5 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (c | |
CVE-2026-91300 |
low | 3.1 | 0.0011 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-8022 |
low | 3.1 | 0.0015 | 2026-05-06 | Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attac | |
CVE-2026-13944 |
low | 3.1 | 0.0018 | 2026-06-30 | Inappropriate implementation in DataTransfer in Google Chrome on Mac prior to 150.0.7871.47 allowed | |
CVE-2026-13963 |
low | 3.1 | 0.0018 | 2026-06-30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-62236 |
low | 2.3 | 0.0011 | 2026-07-17 | grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the lo | |
CVE-2026-4968 |
low | 2.1 | 0.0020 | 2026-03-27 | A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown f | |
CVE-2026-4971 |
low | 2.1 | 0.0016 | 2026-03-27 | A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown | |
CVE-2026-6109 |
low | 2.1 | 0.0022 | 2026-04-12 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the | |
CVE-2026-7108 |
low | 2.1 | 0.0015 | 2026-04-27 | A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affe | |
CVE-2026-49871 |
low | 2.1 | 0.0035 | 2026-06-19 | Cross-Site Request Forgery (CSRF) vulnerability in the cas-auth plugin under default configurations. | |
CVE-2026-13537 |
low | 2.1 | 0.0023 | 2026-06-29 | A vulnerability was found in CodeAstro Human Resource Management System 1.0. Impacted is an unknown | |
CVE-2026-15034 |
low | 2.1 | 0.0029 | 2026-07-08 | A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by | |
CVE-2026-49215 |
low | 2.1 | 0.0018 | 2026-07-17 | Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.0 until 2.36.0 and 3.1.0, Symfony\UX\Liv | |
CVE-2026-16081 |
low | 2.1 | 0.0024 | 2026-07-18 | A vulnerability was determined in Sipeed PicoClaw up to 0.2.9. The affected element is an unknown fu | |
CVE-2026-16216 |
low | 2.1 | 0.0023 | 2026-07-19 | A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function | |
CVE-2026-66884 |
low | 2.1 | 0.0026 | 2026-08-04 | Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Autho | |
CVE-2026-77391 |
low | 2.1 | 0.0023 | 2026-08-21 | A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, | |
CVE-2026-115796 |
low | 2.1 | 0.0016 | 2026-10-23 | A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the | |
CVE-2008-4128 |
— | — | 0.3387 | — | Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to | KEV |
CVE-2025-62593 |
— | — | 0.6015 | — | Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Deve | KEV |
CVE-2026-40764 |
— | — | 0.0010 | 2026-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite |