Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-36590 |
high | 7.5 | 0.0059 | 2026-07-15 | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qo | |
CVE-2026-44433 |
high | 7.5 | 0.0049 | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server | |
CVE-2026-44435 |
high | 7.5 | 0.0049 | 2026-07-16 | Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server | |
CVE-2026-9171 |
high | 7.5 | 0.0055 | 2026-07-17 | IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial | |
CVE-2026-49485 |
high | 7.5 | 0.0068 | 2026-07-17 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in J | |
CVE-2026-56740 |
high | 7.5 | 0.0088 | 2026-07-17 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 | |
CVE-2026-56741 |
high | 7.5 | 0.0060 | 2026-07-17 | JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 | |
CVE-2026-59173 |
high | 7.5 | 0.0074 | 2026-07-18 | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server. This issue affects Apache | |
CVE-2026-45713 |
high | 7.5 | 0.0061 | 2026-07-20 | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP s | |
CVE-2026-16376 |
high | 7.5 | 0.0052 | 2026-07-21 | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and | |
CVE-2026-47018 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel C | |
CVE-2026-47057 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Or | |
CVE-2026-60180 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported | |
CVE-2026-60252 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60301 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60314 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported v | |
CVE-2026-60382 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messa | |
CVE-2026-60425 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-60436 |
high | 7.5 | 0.0047 | 2026-07-21 | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co | |
CVE-2026-14257 |
high | 7.5 | 0.0064 | 2026-07-23 | brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() | |
CVE-2026-66142 |
high | 7.5 | 0.0074 | 2026-07-24 | Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or | |
CVE-2026-66143 |
high | 7.5 | 0.0085 | 2026-07-24 | It is possible to bypass the maximum number of normalized policy alternatives that was introduced in | |
CVE-2026-66144 |
high | 7.5 | 0.0074 | 2026-07-24 | Although remote policy references are not retrieved during policy normalization, if they are manuall | |
CVE-2026-59933 |
high | 7.5 | 0.0046 | 2026-07-28 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 th | |
CVE-2026-59932 |
high | 7.5 | 0.0046 | 2026-07-28 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 th | |
CVE-2026-69152 |
high | 7.5 | 0.0065 | 2026-08-03 | The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior | |
CVE-2026-67973 |
high | 7.5 | 0.0034 | 2026-08-03 | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a Denial of Service ( | |
CVE-2026-67978 |
high | 7.5 | 0.0032 | 2026-08-03 | An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service ( | |
CVE-2026-56846 |
high | 7.5 | 0.0050 | 2026-08-04 | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and | |
CVE-2026-48834 |
high | 7.5 | 0.0076 | 2026-08-05 | Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affe | |
CVE-2026-67872 |
high | 7.5 | 0.0050 | 2026-08-06 | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event | |
CVE-2026-57819 |
high | 7.5 | 0.0073 | 2026-08-06 | Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFo | |
CVE-2026-64958 |
high | 7.5 | 0.0066 | 2026-08-06 | An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service | |
CVE-2026-70646 |
high | 7.5 | 0.0064 | 2026-08-06 | aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version 3.0.7, `WebhookHand | |
CVE-2026-47249 |
high | 7.5 | 0.0049 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.18, the P2P resol | |
CVE-2026-52879 |
high | 7.5 | 0.0049 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7 | |
CVE-2026-52880 |
high | 7.5 | 0.0049 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1 | |
CVE-2026-44630 |
high | 7.5 | 0.0059 | 2026-08-10 | Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthentica | |
CVE-2026-73561 |
high | 7.5 | 0.0061 | 2026-08-13 | Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming un | |
CVE-2026-73566 |
high | 7.5 | 0.0053 | 2026-08-13 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter | |
CVE-2026-73568 |
high | 7.5 | 0.0049 | 2026-08-13 | py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yam | |
CVE-2026-68005 |
high | 7.5 | 0.0058 | 2026-08-17 | An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via | |
CVE-2026-70906 |
high | 7.5 | 0.0046 | 2026-08-18 | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Ja | |
CVE-2026-70908 |
high | 7.5 | 0.0047 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-70927 |
high | 7.5 | 0.0047 | 2026-08-18 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific | |
CVE-2026-73882 |
high | 7.5 | 0.0047 | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | |
CVE-2026-16824 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-16831 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-16836 |
high | 7.5 | 0.0055 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-16837 |
high | 7.5 | 0.0035 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser |