Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1850)
CWE-416 (1298)
CWE-862 (1186)
CWE-89 (1098)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63495 |
high | 7.5 | 0.0061 | 2026-08-20 | Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebS | |
CVE-2026-19446 |
high | 7.5 | 0.0146 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a cr | |
CVE-2026-106565 |
high | 7.5 | 0.0042 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-95127 |
high | 7.5 | 0.0043 | 2026-10-13 | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outlin | |
CVE-2026-95696 |
high | 7.5 | 0.0033 | 2026-10-13 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker | |
CVE-2026-113658 |
high | 7.5 | 0.0062 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthentica | |
CVE-2026-101508 |
high | 7.5 | 0.0051 | 2026-10-20 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supporte | |
CVE-2026-101520 |
high | 7.5 | 0.0051 | 2026-10-20 | Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusi | |
CVE-2026-101572 |
high | 7.5 | 0.0049 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2 | |
CVE-2026-87369 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supp | |
CVE-2026-87395 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-87398 |
high | 7.5 | 0.0049 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91254 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported v | |
CVE-2026-91255 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported v | |
CVE-2026-91344 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91345 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91349 |
high | 7.5 | 0.0032 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91350 |
high | 7.5 | 0.0044 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91664 |
high | 7.5 | 0.0029 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2026-20356 |
high | 7.5 | 0.0044 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Ope | |
CVE-2026-114144 |
high | 7.5 | 0.0044 | 2026-10-21 | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounde | |
CVE-2026-76288 |
high | 7.5 | 0.0047 | 2026-10-21 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user cou | |
CVE-2026-76290 |
high | 7.5 | 0.0050 | 2026-10-21 | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send | |
CVE-2026-75507 |
high | 7.5 | 0.0060 | 2026-10-22 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 an | |
CVE-2026-75508 |
high | 7.5 | 0.0057 | 2026-10-22 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 an | |
CVE-2026-79894 |
high | 7.5 | 0.0041 | 2026-10-22 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Succe | |
CVE-2026-79895 |
high | 7.5 | 0.0051 | 2026-10-22 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker t | |
CVE-2026-50787 |
high | 7.5 | 0.0049 | 2026-10-23 | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerabili | |
CVE-2026-115776 |
high | 7.5 | 0.0050 | 2026-10-23 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1 | |
CVE-2026-115778 |
high | 7.5 | 0.0054 | 2026-10-23 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1 | |
CVE-2026-115907 |
high | 7.5 | 0.0035 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9 | |
CVE-2026-115909 |
high | 7.5 | 0.0046 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9 | |
CVE-2026-33521 |
high | 7.5 | 0.0045 | 2026-10-26 | There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may al | |
CVE-2026-118779 |
high | 7.5 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-119191 |
high | 7.5 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-104591 |
high | 7.5 | 0.0022 | 2026-10-26 | libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/ | |
CVE-2026-119283 |
high | 7.5 | — | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry | |
CVE-2026-119286 |
high | 7.5 | — | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, | |
CVE-2026-103963 |
high | 7.5 | — | 2026-10-30 | A flaw was found in glib-networking. When establishing connections using Transport Layer Security (T | |
CVE-2026-60667 |
high | 7.4 | 0.0036 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (compone | |
CVE-2026-43870 |
high | 7.3 | 0.0038 | 2026-05-05 | Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversa | |
CVE-2026-91238 |
high | 7.1 | 0.0035 | 2026-10-20 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). | |
CVE-2026-91256 |
high | 7.1 | 0.0037 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported | |
CVE-2026-96637 |
high | 7.1 | 0.0037 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePl | |
CVE-2026-42212 |
high | 7.1 | 0.0040 | 2026-05-08 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCA | |
CVE-2026-46914 |
high | 7.1 | 0.0015 | 2026-06-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The support | |
CVE-2026-47214 |
high | 7.1 | 0.0037 | 2026-06-26 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-46627 |
high | 7.1 | 0.0054 | 2026-07-14 | Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not prevent a template f | |
CVE-2026-33443 |
high | 7.1 | 0.0037 | 2026-07-15 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with | |
CVE-2026-21577 |
high | 7.1 | 0.0043 | 2026-07-21 | This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9. |