Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46470 |
critical | 9.1 | 0.0021 | 2026-05-14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, | |
CVE-2026-35215 |
high | 7.5 | 0.0047 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-33593 |
high | 7.5 | 0.0038 | 2026-04-22 | A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query. | |
CVE-2026-47152 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can terminate the process th | |
CVE-2026-47153 |
high | 7.1 | 0.0044 | 2026-06-25 | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can terminate the process th | |
CVE-2026-61378 |
medium | 6.8 | 0.0016 | 2026-07-16 | A divide-by-zero vulnerability in the Productivity Suite allows a local attacker to cause a divisio | |
CVE-2026-19025 |
medium | 6.8 | 0.0017 | 2026-08-05 | H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate that a chunked dataset's s | |
CVE-2026-110605 |
medium | 6.8 | 0.0028 | 2026-10-14 | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash app | |
CVE-2026-112054 |
medium | 6.8 | 0.0018 | 2026-10-18 | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows atta | |
CVE-2026-42209 |
medium | 6.5 | 0.0043 | 2026-05-08 | FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a rem | |
CVE-2026-63117 |
medium | 6.5 | 0.0055 | 2026-08-19 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated R | |
CVE-2026-93589 |
medium | 6.3 | 0.0034 | 2026-09-18 | ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An i | |
CVE-2026-17535 |
medium | 6.2 | 0.0016 | 2026-08-11 | Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which | |
CVE-2026-64236 |
medium | 5.5 | 0.0016 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by z | |
CVE-2025-55653 |
medium | 5.5 | 0.0018 | 2026-10-16 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function | |
CVE-2026-21996 |
medium | 5.5 | 0.0011 | 2026-05-01 | An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF bin | |
CVE-2026-42443 |
medium | 5.5 | 0.0015 | 2026-05-12 | NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer divide-by-z | |
CVE-2026-46469 |
medium | 5.5 | 0.0010 | 2026-05-14 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, | |
CVE-2026-10679 |
medium | 5.5 | 0.0014 | 2026-07-21 | The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock | |
CVE-2026-64275 |
medium | 5.5 | 0.0016 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent divis | |
CVE-2026-59959 |
medium | 4.8 | 0.0013 | 2026-10-28 | SAIL is a cross-platform library for loading and saving images with support for animation, metadata, | |
CVE-2026-6683 |
medium | 4.6 | 0.0031 | 2026-07-01 | FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata caus | |
CVE-2026-7007 |
medium | 4.6 | 0.0024 | 2026-07-24 | The Zephyr ext2 file system validates the on-disk superblock in ext2_verify_disk_superblock() (subsy | |
CVE-2026-16897 |
medium | 4.4 | 0.0014 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-64951 |
low | 3.5 | 0.0028 | 2026-08-12 | A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expa |