Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-50628 |
critical | 9.8 | 0.0071 | 2026-06-12 | A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP addres | |
CVE-2026-70174 |
high | 8.8 | 0.0091 | 2026-10-13 | Improperly implemented security check for standard in .NET allows an unauthorized attacker to execut | |
CVE-2026-12577 |
high | 8.7 | 0.0043 | 2026-07-01 | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | |
CVE-2026-49783 |
high | 7.8 | 0.0033 | 2026-07-14 | Improperly implemented security check for standard in Windows Secure Boot allows an authorized attac | |
CVE-2026-22618 |
high | 7.1 | 0.0023 | 2026-04-16 | A security misconfiguration was identified in Eaton Intelligent Power Protector (IPP), where an HTTP | |
CVE-2026-44473 |
high | 7.1 | 0.0017 | 2026-05-27 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup | |
CVE-2026-96303 |
medium | 6.5 | 0.0069 | 2026-10-13 | Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized at | |
CVE-2026-85805 |
medium | 6.5 | 0.0059 | 2026-10-13 | Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta | |
CVE-2026-44475 |
medium | 6.1 | 0.0015 | 2026-05-27 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the | |
CVE-2026-28914 |
medium | 5.5 | 0.0020 | 2026-05-11 | A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.8 | |
CVE-2026-54431 |
medium | 5.1 | 0.0018 | 2026-07-02 | In liboauth2 the Demonstrating Proof-of-Possession (DPoP) verifier accepts a proof whose JSON Web Ke | |
CVE-2026-44474 |
low | 3.7 | 0.0013 | 2026-05-27 | Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce secu | |
CVE-2026-46582 |
low | 3.7 | 0.0019 | 2026-07-22 | In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piec | |
CVE-2026-45109 |
— | — | 0.0060 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 | |
CVE-2026-44513 |
— | — | 0.0107 | 2026-05-14 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code by | |
CVE-2026-57915 |
— | — | 0.0053 | 2026-06-26 | It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA |