Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-20649 |
high | 7.5 | 0.0046 | 2026-02-11 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPad | |
CVE-2025-67223 |
high | 7.5 | 0.0063 | 2026-04-28 | The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores d | |
CVE-2026-44878 |
high | 7.2 | 0.0060 | 2026-07-21 | A vulnerability in the web-based management interface of an ECOS device could allow a highly privile | |
CVE-2026-93864 |
high | 7.1 | 0.0013 | 2026-10-27 | A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker w | |
CVE-2026-20204 |
high | 7.1 | 0.0310 | 2026-04-15 | In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform ve | |
CVE-2026-76497 |
medium | 6.6 | 0.0016 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expresswa | |
CVE-2026-40979 |
medium | 6.1 | 0.0010 | 2026-04-28 | In Spring AI, having access to a shared environment can expose the ONNX model used by the applicatio | |
CVE-2026-62294 |
medium | 5.1 | 0.0014 | 2026-07-15 | Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature | |
CVE-2026-113713 |
medium | 4.4 | 0.0020 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, | |
CVE-2026-46406 |
medium | 4.4 | 0.0015 | 2026-06-29 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wro | |
CVE-2026-35342 |
low | 3.3 | 0.0013 | 2026-04-22 | The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable | |
CVE-2026-41991 |
low | 2.0 | 0.0012 | 2026-06-29 | GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. | |
CVE-2026-53759 |
low | 2.0 | 0.0019 | 2026-08-18 | linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integ | |
CVE-2026-16791 |
low | 1.0 | 0.0013 | 2026-08-04 | A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5. |