Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-13385 |
critical | 9.5 | 0.0014 | 2026-07-15 | An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS | |
CVE-2026-32105 |
critical | 9.3 | 0.0017 | 2026-04-17 | xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification | |
CVE-2026-75625 |
critical | 9.1 | 0.0024 | 2026-08-18 | Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest be | |
CVE-2026-40323 |
high | 8.9 | 0.0019 | 2026-04-18 | SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for t | |
CVE-2026-32148 |
high | 8.9 | 0.0019 | 2026-04-30 | Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger modul | |
CVE-2026-89320 |
high | 8.8 | 0.0017 | 2026-10-23 | `HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of th | |
CVE-2026-26928 |
high | 8.7 | 0.0021 | 2026-04-02 | SzafirHost downloads necessary files in the context of the initiating web page. When called, SzafirH | |
CVE-2024-3727 |
high | 8.3 | 0.0128 | 2024-05-09 | A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger u | |
CVE-2026-16317 |
high | 8.3 | 0.0025 | 2026-07-21 | Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an | |
CVE-2026-15999 |
high | 8.2 | 0.0022 | 2026-10-02 | Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlo | |
CVE-2026-16001 |
high | 8.2 | 0.0015 | 2026-10-02 | Exposure of the message authentication key through the encryption keystream in the stream mode of Ie | |
CVE-2026-103601 |
high | 8.2 | 0.0029 | 2026-10-02 | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD | |
CVE-2025-61480 |
high | 7.5 | 0.0018 | 2026-08-26 | An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically | |
CVE-2026-28854 |
high | 7.5 | 0.0015 | 2026-10-20 | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Go | |
CVE-2026-118782 |
high | 7.5 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-90720 |
medium | 6.7 | 0.0008 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2026-115906 |
medium | 6.5 | 0.0015 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9 | |
CVE-2026-8597 |
medium | 6.4 | 0.0051 | 2026-05-14 | Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 bef | |
CVE-2026-49230 |
medium | 6.3 | 0.0030 | 2026-06-19 | Improper Validation of Integrity Check Value vulnerability in Apache APISIX. The jwe-decrypt plugin | |
CVE-2026-109366 |
medium | 6.3 | 0.0016 | 2026-10-12 | Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip dow | |
CVE-2026-65625 |
medium | 5.9 | 0.0011 | 2026-10-26 | The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag b | |
CVE-2026-119186 |
medium | 5.9 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-56416 |
medium | 4.8 | 0.0012 | 2026-07-22 | In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RD | |
CVE-2026-35501 |
low | 3.7 | 0.0011 | 2026-10-21 | When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trus | |
CVE-2026-118776 |
low | 3.7 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-113714 |
low | 2.3 | 0.0025 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_w | |
CVE-2026-116608 |
low | 2.1 | 0.0015 | 2026-10-27 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this i |