Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-11317 |
high | 8.7 | 0.0030 | 2026-06-16 | A denial of service security issue exists in the affected product. The security issue stems from a f | |
CVE-2026-45174 |
high | 8.5 | 0.0013 | 2026-06-11 | Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potent | |
CVE-2026-49785 |
high | 7.8 | 0.0038 | 2026-10-13 | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu | |
CVE-2026-98093 |
high | 7.8 | 0.0013 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk | |
CVE-2025-63895 |
high | 7.5 | 0.0031 | 2025-12-10 | An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows | |
CVE-2026-45090 |
high | 7.5 | 0.0027 | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, Par | |
CVE-2026-12575 |
high | 7.5 | 0.0046 | 2026-07-01 | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | |
CVE-2026-59725 |
high | 7.5 | 0.0064 | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before | |
CVE-2026-113872 |
high | 7.5 | 0.0044 | 2026-10-22 | multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2 | |
CVE-2026-117503 |
medium | 6.9 | 0.0071 | 2026-10-27 | A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of | |
CVE-2026-117504 |
medium | 6.9 | 0.0055 | 2026-10-27 | A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the functio | |
CVE-2026-118275 |
medium | 6.9 | 0.0043 | 2026-10-28 | A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.r | |
CVE-2026-7734 |
medium | 6.9 | 0.0046 | 2026-05-04 | A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAtt | |
CVE-2026-17500 |
medium | 6.9 | 0.0072 | 2026-07-27 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit | |
CVE-2026-17501 |
medium | 6.9 | 0.0072 | 2026-07-27 | A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transfo | |
CVE-2026-115971 |
medium | 6.9 | 0.0037 | 2026-10-24 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the f | |
CVE-2026-60624 |
medium | 6.5 | 0.0036 | 2026-07-21 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported v | |
CVE-2026-75012 |
medium | 5.7 | 0.0066 | 2026-08-17 | A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by th | |
CVE-2026-75013 |
medium | 5.7 | 0.0066 | 2026-08-17 | A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function se | |
CVE-2026-6607 |
medium | 5.5 | 0.0062 | 2026-04-20 | A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the f | |
CVE-2026-6985 |
medium | 5.5 | 0.0056 | 2026-04-25 | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the functi | |
CVE-2026-8318 |
medium | 5.5 | 0.0037 | 2026-05-11 | A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929 | |
CVE-2026-8319 |
medium | 5.5 | 0.0038 | 2026-05-11 | A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59. | |
CVE-2026-19362 |
medium | 5.5 | 0.0064 | 2026-08-09 | A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function pa | |
CVE-2026-71073 |
medium | 5.5 | 0.0016 | 2026-08-18 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The sup | |
CVE-2026-117505 |
medium | 5.3 | 0.0031 | 2026-10-27 | A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element i | |
CVE-2026-117506 |
medium | 5.3 | 0.0031 | 2026-10-27 | A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function I | |
CVE-2026-118271 |
medium | 5.3 | 0.0031 | 2026-10-28 | A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. This impacts an unknow | |
CVE-2026-118273 |
medium | 5.3 | 0.0031 | 2026-10-28 | A flaw has been found in a2ui-project a2ui up to 0.10.6. Affected by this vulnerability is the funct | |
CVE-2026-118274 |
medium | 5.3 | 0.0031 | 2026-10-28 | A vulnerability has been found in a2ui-project a2ui up to 0.10.6. Affected by this issue is some unk | |
CVE-2026-6797 |
medium | 5.3 | 0.0027 | 2026-04-21 | A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability | |
CVE-2026-118276 |
medium | 5.1 | 0.0024 | 2026-10-28 | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the fun | |
CVE-2026-34317 |
medium | 5.0 | 0.0015 | 2026-04-21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported | |
CVE-2026-6042 |
medium | 4.8 | 0.0024 | 2026-04-10 | A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the | |
CVE-2026-91324 |
medium | 4.7 | 0.0012 | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supporte | |
CVE-2026-40136 |
medium | 4.3 | 0.0029 | 2026-05-12 | SAP Financial Consolidation allows an authenticated attacker to disconnect other users by terminatin | |
CVE-2026-60397 |
medium | 4.3 | 0.0033 | 2026-07-21 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that ar | |
CVE-2026-101402 |
low | 3.7 | 0.0034 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketin | |
CVE-2026-60896 |
low | 3.6 | 0.0013 | 2026-07-21 | Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal | |
CVE-2026-91302 |
low | 3.3 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterpr | |
CVE-2026-91330 |
low | 3.3 | 0.0010 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Install | |
CVE-2026-13491 |
low | 2.9 | 0.0062 | 2026-06-28 | A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the functio | |
CVE-2026-101400 |
low | 2.9 | 0.0015 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-101401 |
low | 2.9 | 0.0015 | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). S | |
CVE-2026-61187 |
low | 2.8 | 0.0014 | 2026-07-21 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (compon | |
CVE-2026-91427 |
low | 2.3 | 0.0015 | 2026-10-20 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastru | |
CVE-2026-5313 |
low | 2.1 | 0.0029 | 2026-04-01 | A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif | |
CVE-2026-6601 |
low | 2.1 | 0.0028 | 2026-04-20 | A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function | |
CVE-2026-7701 |
low | 2.1 | 0.0039 | 2026-05-03 | A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affec | |
CVE-2026-8781 |
low | 2.1 | 0.0030 | 2026-05-18 | A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the |