Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-55769 |
critical | 9.4 | 0.0077 | 2026-08-20 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. | |
CVE-2026-108398 |
high | 8.8 | 0.0078 | 2026-10-13 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature l | |
CVE-2026-63093 |
high | 8.7 | 0.0085 | 2026-07-17 | Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attack | |
CVE-2026-11400 |
high | 8.6 | 0.0050 | 2026-06-05 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amaz | |
CVE-2026-11401 |
high | 8.6 | 0.0031 | 2026-06-05 | An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon | |
CVE-2026-48395 |
high | 8.6 | 0.0029 | 2026-07-28 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code exe | |
CVE-2026-41447 |
high | 8.5 | 0.0017 | 2026-08-03 | FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attack | |
CVE-2026-40287 |
high | 8.4 | 0.0025 | 2026-04-14 | PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code | |
CVE-2026-6901 |
high | 8.4 | 0.0016 | 2026-07-06 | Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APR | |
CVE-2026-47211 |
high | 8.4 | 0.0019 | 2026-08-03 | Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user- | |
CVE-2026-48391 |
high | 8.2 | 0.0027 | 2026-07-28 | Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code exe | |
CVE-2023-34119 |
high | 7.8 | 0.0019 | 2023-07-11 | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow | |
CVE-2026-70142 |
high | 7.8 | 0.0041 | 2026-10-13 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges | |
CVE-2026-83506 |
high | 7.8 | 0.0041 | 2026-10-13 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges | |
CVE-2026-56174 |
high | 7.8 | 0.0046 | 2026-08-11 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privilege | |
CVE-2026-69733 |
high | 7.8 | 0.0063 | 2026-10-13 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | |
CVE-2026-69882 |
high | 7.8 | 0.0058 | 2026-10-13 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. | |
CVE-2026-40156 |
high | 7.8 | 0.0021 | 2026-04-10 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI automatically loads a file name | |
CVE-2026-35368 |
high | 7.8 | 0.0014 | 2026-04-22 | A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. T | |
CVE-2026-30906 |
high | 7.8 | 0.0012 | 2026-05-13 | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an | |
CVE-2026-55522 |
high | 7.8 | 0.0022 | 2026-08-05 | PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 | |
CVE-2026-16869 |
high | 7.8 | 0.0017 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code | |
CVE-2026-49145 |
high | 7.5 | 0.0049 | 2026-07-08 | App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. | |
CVE-2026-105477 |
high | 7.3 | 0.0013 | 2026-10-27 | A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations t | |
CVE-2026-83505 |
high | 7.0 | 0.0026 | 2026-10-13 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize | |
CVE-2026-83509 |
high | 7.0 | 0.0034 | 2026-10-13 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privil | |
CVE-2026-53846 |
high | 7.0 | 0.0012 | 2026-06-16 | OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows | |
CVE-2026-57203 |
medium | 6.9 | 0.0014 | 2026-10-27 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, | |
CVE-2026-45792 |
medium | 6.9 | 0.0011 | 2026-06-23 | rtk filters and compresses command outputs before they reach your LLM context. Prior to 0.32.0, RTK | |
CVE-2026-42830 |
medium | 6.5 | 0.0047 | 2026-05-12 | Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges loc | |
CVE-2026-57097 |
medium | 6.4 | 0.0050 | 2026-07-14 | Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature | |
CVE-2026-6421 |
medium | 6.4 | 0.0015 | 2026-04-17 | A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown | |
CVE-2026-15515 |
medium | 6.4 | 0.0016 | 2026-07-13 | A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects | |
CVE-2026-18605 |
medium | 6.4 | 0.0016 | 2026-08-03 | A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown funct | |
CVE-2026-0251 |
medium | 5.9 | 0.0019 | 2026-05-13 | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app all | |
CVE-2026-0299 |
medium | 5.9 | 0.0017 | 2026-08-13 | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a loc | |
CVE-2026-35603 |
medium | 5.4 | 0.0011 | 2026-04-17 | Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded th | |
CVE-2026-113461 |
medium | 5.2 | 0.0012 | 2026-10-21 | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle c | |
CVE-2026-54055 |
medium | 5.0 | 0.0007 | 2026-06-12 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalat | |
CVE-2026-7309 |
medium | 4.3 | 0.0018 | 2026-04-28 | A flaw was found in the OpenShift Container Platform build system. A user with the `edit` ClusterRol | |
CVE-2026-40947 |
low | 2.9 | 0.0013 | 2026-04-16 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an u | |
CVE-2024-3220 |
low | 2.3 | 0.0072 | 2025-02-14 | There is a defect in the CPython standard library module “mimetypes” where on Windows the default li | |
CVE-2026-45772 |
none | — | 0.0039 | 2026-05-15 | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to | |
CVE-2012-1854 |
— | — | — | — | Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability tha | KEV |