Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-54423 |
high | 8.2 | 0.0030 | 2026-07-10 | In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI ma | |
CVE-2026-0237 |
high | 7.3 | 0.0015 | 2026-05-13 | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macO | |
CVE-2026-110865 |
high | 7.1 | 0.0019 | 2026-10-14 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to e | |
CVE-2026-114659 |
high | 7.1 | 0.0063 | 2026-10-22 | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /a | |
CVE-2026-66756 |
medium | 6.9 | 0.0075 | 2026-07-30 | Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: | |
CVE-2026-4913 |
medium | 5.7 | 0.0059 | 2026-04-14 | Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote auth | |
CVE-2026-69979 |
medium | 5.5 | 0.0038 | 2026-10-13 | Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack | |
CVE-2026-89419 |
medium | 5.0 | 0.0029 | 2026-10-23 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node v | |
CVE-2026-76529 |
— | — | 0.0017 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted |