Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-57211 |
critical | 10.0 | 0.0063 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ man | |
CVE-2026-47606 |
critical | 9.1 | 0.0074 | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an a | |
CVE-2026-70297 |
high | 8.8 | 0.0116 | 2026-10-13 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to ex | |
CVE-2026-83784 |
high | 8.8 | 0.0108 | 2026-10-13 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to ele | |
CVE-2026-32997 |
high | 8.6 | 0.0051 | 2026-05-28 | A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary | |
CVE-2026-54202 |
high | 8.5 | 0.0045 | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the ar | |
CVE-2026-46345 |
high | 8.4 | 0.0020 | 2026-08-17 | compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 a | |
CVE-2026-83746 |
high | 8.1 | 0.0115 | 2026-10-13 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to el | |
CVE-2026-49290 |
high | 7.6 | 0.0083 | 2026-06-19 | Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 C | |
CVE-2026-35465 |
high | 7.5 | 0.0044 | 2026-04-18 | SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle s | |
CVE-2026-13189 |
high | 7.5 | 0.0036 | 2026-07-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language para | |
CVE-2026-61891 |
high | 7.5 | 0.0053 | 2026-08-05 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP f | |
CVE-2026-34515 |
medium | 6.6 | 0.0043 | 2026-04-01 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1 | |
CVE-2026-83683 |
medium | 6.5 | 0.0128 | 2026-10-13 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis | |
CVE-2026-58300 |
medium | 6.2 | 0.0045 | 2026-07-03 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in | |
CVE-2026-118693 |
medium | 5.6 | — | 2026-10-28 | CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_imag | |
CVE-2026-13346 |
medium | 5.6 | 0.0029 | 2026-07-29 | pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be insta | |
CVE-2026-47630 |
medium | 5.5 | 0.0018 | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an a | |
CVE-2026-44029 |
medium | 5.3 | 0.0057 | 2026-05-05 | An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch | |
CVE-2026-6418 |
medium | 4.6 | 0.0056 | 2026-05-05 | An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0 | |
CVE-2018-20250 |
— | — | — | — | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution | KEV |
CVE-2024-48248 |
— | — | 0.9436 | — | NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an atta | KEV |