Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63228 |
low | 2.6 | 0.0021 | 2026-07-29 | An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to uploa | |
CVE-2026-76800 |
low | 2.1 | 0.0035 | 2026-08-20 | A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of th | |
CVE-2026-1879 |
low | 2.1 | 0.0026 | 2026-04-01 | A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown | |
CVE-2026-5670 |
low | 2.1 | 0.0021 | 2026-04-06 | A vulnerability was found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e62 | |
CVE-2026-6489 |
low | 2.1 | 0.0026 | 2026-04-17 | A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. | |
CVE-2026-7107 |
low | 2.1 | 0.0020 | 2026-04-27 | A weakness has been identified in code-projects Invoice System in Laravel 1.0. The impacted element | |
CVE-2026-7696 |
low | 2.1 | 0.0022 | 2026-05-03 | A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud | |
CVE-2026-7732 |
low | 2.1 | 0.0021 | 2026-05-04 | A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is | |
CVE-2026-11333 |
low | 2.1 | 0.0021 | 2026-06-05 | A security vulnerability has been detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a0 | |
CVE-2026-53724 |
low | 2.1 | 0.0028 | 2026-06-12 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-14698 |
low | 2.1 | 0.0037 | 2026-07-05 | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Exami | |
CVE-2026-14775 |
low | 2.1 | 0.0037 | 2026-07-05 | A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. | |
CVE-2026-14776 |
low | 2.1 | 0.0037 | 2026-07-05 | A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System | |
CVE-2026-14777 |
low | 2.1 | 0.0037 | 2026-07-06 | A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. | |
CVE-2026-55778 |
low | 2.1 | 0.0055 | 2026-07-08 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node. | |
CVE-2026-61448 |
low | 2.1 | 0.0042 | 2026-07-11 | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, | |
CVE-2026-16451 |
low | 2.1 | 0.0035 | 2026-07-21 | A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a | |
CVE-2026-18927 |
low | 2.1 | 0.0035 | 2026-08-05 | A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a | |
CVE-2026-19210 |
low | 2.1 | 0.0040 | 2026-08-07 | A vulnerability has been found in SourceCodester Photo Share Website 1.0. The impacted element is an | |
CVE-2026-116044 |
low | 2.1 | 0.0021 | 2026-10-25 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by thi | |
CVE-2026-116057 |
low | 2.1 | 0.0033 | 2026-10-25 | A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is | |
CVE-2026-116603 |
low | 2.0 | 0.0029 | 2026-10-27 | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown func | |
CVE-2026-7133 |
low | 2.0 | 0.0022 | 2026-04-27 | A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an u | |
CVE-2026-7134 |
low | 2.0 | 0.0022 | 2026-04-27 | A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an un | |
CVE-2026-7238 |
low | 2.0 | 0.0023 | 2026-04-28 | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the fi | |
CVE-2026-7393 |
low | 2.0 | 0.0027 | 2026-04-29 | A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function s | |
CVE-2026-15518 |
low | 2.0 | 0.0038 | 2026-07-13 | A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the functio | |
CVE-2026-15539 |
low | 2.0 | 0.0040 | 2026-07-13 | A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted | |
CVE-2017-11357 |
— | — | 0.7768 | — | Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUp | KEV |
CVE-2017-12615 |
— | — | 0.9971 | — | When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to | KEV |
CVE-2017-12617 |
— | — | 0.9997 | — | When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafte | KEV |
CVE-2021-20022 |
— | — | 0.1664 | — | SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability t | KEV |
CVE-2024-7399 |
— | — | 0.9194 | — | Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to w | KEV |
CVE-2024-50623 |
— | — | 0.9861 | — | Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestrict | KEV |
CVE-2025-31324 |
— | — | 0.9949 | — | SAP NetWeaver Visual Composer Metadata Uploader contains an unrestricted file upload vulnerability t | KEV |
CVE-2025-52691 |
— | — | 0.8566 | — | SmarterTools SmarterMail contains an unrestricted upload of file with dangerous type vulnerability t | KEV |
CVE-2026-9182 |
— | — | 0.0062 | 2026-07-06 | Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker c |