Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-3428 |
medium | 5.4 | 0.0007 | 2026-04-16 | A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center | |
CVE-2026-75524 |
medium | 5.4 | 0.0019 | 2026-10-23 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking pl | |
CVE-2026-35345 |
medium | 5.3 | 0.0010 | 2026-04-22 | A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive fil | |
CVE-2026-58041 |
medium | 5.3 | 0.0029 | 2026-08-04 | A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#crea | |
CVE-2026-71210 |
medium | 5.3 | 0.0023 | 2026-08-05 | Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostnam | |
CVE-2026-41051 |
medium | 5.1 | 0.0008 | 2026-05-13 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU styl | |
CVE-2026-62212 |
medium | 5.1 | 0.0022 | 2026-07-17 | OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. W | |
CVE-2026-6505 |
medium | 5.1 | 0.0009 | 2026-08-11 | The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could pote | |
CVE-2026-54055 |
medium | 5.0 | 0.0007 | 2026-06-12 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalat | |
CVE-2026-54242 |
medium | 4.9 | 0.0023 | 2026-07-17 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, | |
CVE-2026-22751 |
medium | 4.8 | 0.0012 | 2026-04-21 | Vulnerability in Spring Spring Security. Applications that explicitly configure One-Time Token login | |
CVE-2026-83504 |
medium | 4.7 | 0.0027 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attack | |
CVE-2026-112935 |
medium | 4.7 | 0.0013 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can b | |
CVE-2026-96853 |
medium | 4.7 | 0.0023 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author | |
CVE-2026-83697 |
medium | 4.7 | 0.0023 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a | |
CVE-2026-84009 |
medium | 4.7 | 0.0020 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authori | |
CVE-2026-35354 |
medium | 4.7 | 0.0011 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils d | |
CVE-2026-35357 |
medium | 4.7 | 0.0009 | 2026-04-22 | The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destin | |
CVE-2026-35359 |
medium | 4.7 | 0.0013 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows a | |
CVE-2026-70075 |
medium | 4.4 | 0.0031 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enc | |
CVE-2026-6180 |
medium | 4.1 | 0.0034 | 2026-05-05 | A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunctio | |
CVE-2026-53945 |
medium | 4.0 | 0.0021 | 2026-06-24 | Ghost is a Node.js content management system. From 6.0.9 until 6.21.1, Ghost’s private-IP check for | |
CVE-2026-48931 |
low | 3.7 | 0.0032 | 2026-06-22 | A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before th | |
CVE-2026-35362 |
low | 3.6 | 0.0018 | 2026-04-22 | The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Ti | |
CVE-2026-112941 |
low | 3.3 | 0.0013 | 2026-10-20 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock a | |
CVE-2026-35353 |
low | 3.3 | 0.0010 | 2026-04-22 | The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by crea | |
CVE-2026-49262 |
low | 3.0 | 0.0017 | 2026-08-12 | In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy ro | |
CVE-2026-54327 |
low | 2.2 | 0.0009 | 2026-06-23 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth cred | |
CVE-2026-5958 |
low | 2.1 | 0.0014 | 2026-04-20 | When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file( | |
CVE-2026-16082 |
low | 1.9 | 0.0012 | 2026-07-18 | A vulnerability was identified in Sipeed PicoClaw up to 0.2.9. The impacted element is the function | |
CVE-2026-7724 |
low | 1.3 | 0.0025 | 2026-05-04 | A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerabilit | |
CVE-2026-13502 |
low | 1.1 | 0.0011 | 2026-06-28 | A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.read | |
CVE-2015-3246 |
— | — | 0.0850 | — | Red Hat libuser contains a race condition vulnerability that allows authenticated local users to cor | KEV |
CVE-2023-35311 |
— | — | 0.1552 | — | Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass | KEV |
CVE-2024-30088 |
— | — | 0.6820 | — | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerabili | KEV |
CVE-2025-38352 |
— | — | 0.0136 | — | Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a h | KEV |