Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-21728 |
— | — | 0.0064 | 2026-04-24 | Tempo queries with large limits can cause large memory allocations which can impact the availability | |
CVE-2026-42006 |
— | — | 0.0062 | 2026-05-12 | An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-202 | |
CVE-2026-42587 |
— | — | 0.0099 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1. | |
CVE-2026-45498 |
— | — | 0.6308 | — | Microsoft Defender contains an unspecified vulnerability that allows for denial of service. | KEV |
CVE-2026-28318 |
— | — | 0.4365 | — | SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially | KEV |
CVE-2026-48779 |
— | — | 0.0143 | 2026-06-17 | ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not | |
CVE-2026-33818 |
— | — | 0.0057 | 2026-08-13 | Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recur | |
CVE-2026-65347 |
— | — | 0.0042 | 2026-08-17 | The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, m | |
CVE-2026-65410 |
— | — | 0.0050 | 2026-09-14 | The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 2 | |
CVE-2026-84553 |
— | — | 0.0070 | 2026-09-14 | A resource exhaustion issue was addressed with improved input validation. This issue is fixed in mac | |
CVE-2026-41114 |
— | — | 0.0025 | 2026-10-21 | Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects A | |
CVE-2026-61902 |
— | — | 0.0016 | 2026-10-21 | Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in | |
CVE-2026-78058 |
— | — | 0.0031 | 2026-10-21 | Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) | |
CVE-2026-81755 |
— | — | 0.0023 | 2026-10-21 | Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) a | |
CVE-2026-86147 |
— | — | 0.0020 | 2026-10-21 | External control of file name or path and uncontrolled resource consumption in Apache bRPC (version | |
CVE-2004-1464 |
— | — | 0.0484 | — | Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remot | KEV |