Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-52857 |
medium | 5.5 | 0.0016 | 2026-07-31 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. | |
CVE-2026-19653 |
medium | 5.5 | 0.0013 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-16952 |
medium | 5.5 | 0.0013 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-18822 |
medium | 5.5 | 0.0014 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-116095 |
medium | 5.5 | 0.0052 | 2026-10-25 | A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the f | |
CVE-2026-101432 |
medium | 5.3 | 0.0013 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test | |
CVE-2026-114603 |
medium | 5.3 | 0.0049 | 2026-10-22 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentel | |
CVE-2026-86018 |
medium | 5.3 | 0.0040 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2026-115927 |
medium | 5.3 | 0.0038 | 2026-10-26 | Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decod | |
CVE-2026-117505 |
medium | 5.3 | 0.0031 | 2026-10-27 | A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element i | |
CVE-2026-117506 |
medium | 5.3 | 0.0031 | 2026-10-27 | A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function I | |
CVE-2026-118271 |
medium | 5.3 | 0.0031 | 2026-10-28 | A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknow | |
CVE-2026-118273 |
medium | 5.3 | 0.0031 | 2026-10-28 | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the funct | |
CVE-2026-118274 |
medium | 5.3 | 0.0031 | 2026-10-28 | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unk | |
CVE-2026-27859 |
medium | 5.3 | 0.0038 | 2026-03-27 | A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much C | |
CVE-2026-2405 |
medium | 5.3 | 0.0024 | 2026-04-14 | CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troublesho | |
CVE-2026-40347 |
medium | 5.3 | 0.0035 | 2026-04-18 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial | |
CVE-2026-6777 |
medium | 5.3 | 0.0016 | 2026-04-21 | Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunde | |
CVE-2026-22021 |
medium | 5.3 | 0.0031 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-6797 |
medium | 5.3 | 0.0027 | 2026-04-21 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability | |
CVE-2026-22745 |
medium | 5.3 | 0.0034 | 2026-04-29 | Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving stati | |
CVE-2026-41310 |
medium | 5.3 | 0.0031 | 2026-05-06 | OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry. In versions 1.15.2 and | |
CVE-2026-48525 |
medium | 5.3 | 0.0037 | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JW | |
CVE-2026-48990 |
medium | 5.3 | 0.0016 | 2026-06-17 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encry | |
CVE-2026-57962 |
medium | 5.3 | 0.0034 | 2026-07-01 | A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomple | |
CVE-2026-54886 |
medium | 5.3 | 0.0033 | 2026-07-02 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd mo | |
CVE-2026-58203 |
medium | 5.3 | 0.0019 | 2026-07-06 | pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecre | |
CVE-2026-48125 |
medium | 5.3 | 0.0052 | 2026-07-14 | UAParser.js is a JavaScript library to detect browsers, operating systems, CPUs, and devices from us | |
CVE-2026-53596 |
medium | 5.3 | 0.0029 | 2026-07-20 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version | |
CVE-2026-61070 |
medium | 5.3 | 0.0041 | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft | |
CVE-2026-61192 |
medium | 5.3 | 0.0034 | 2026-07-21 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-21723 |
medium | 5.3 | 0.0022 | 2026-07-23 | The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) ca | |
CVE-2026-66299 |
medium | 5.3 | 0.0055 | 2026-07-28 | Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss | |
CVE-2026-73228 |
medium | 5.3 | 0.0056 | 2026-08-11 | Django REST framework is a toolkit for building Web APIs. Prior to 3.17.2, Django REST Framework's r | |
CVE-2026-74903 |
medium | 5.3 | 0.0025 | 2026-08-18 | SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBloc | |
CVE-2026-101399 |
medium | 5.3 | 0.0043 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-101587 |
medium | 5.3 | 0.0043 | 2026-10-20 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1 | |
CVE-2026-83400 |
medium | 5.3 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-91352 |
medium | 5.3 | 0.0029 | 2026-10-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Ou | |
CVE-2026-91373 |
medium | 5.3 | 0.0044 | 2026-10-20 | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle | |
CVE-2026-91410 |
medium | 5.3 | 0.0031 | 2026-10-20 | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Or | |
CVE-2026-91417 |
medium | 5.3 | 0.0031 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co | |
CVE-2026-91418 |
medium | 5.3 | 0.0040 | 2026-10-20 | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterpris | |
CVE-2026-86019 |
medium | 5.3 | 0.0025 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2026-93007 |
medium | 5.3 | — | 2026-10-29 | A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does | |
CVE-2026-90870 |
medium | 5.3 | — | 2026-10-29 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software | |
CVE-2026-91208 |
medium | 5.1 | 0.0013 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported | |
CVE-2026-118276 |
medium | 5.1 | 0.0024 | 2026-10-28 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the fun | |
CVE-2026-55399 |
medium | 5.1 | 0.0037 | 2026-07-15 | CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. | |
CVE-2026-101502 |
medium | 5.0 | 0.0011 | 2026-10-20 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version th |