Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-34263 |
critical | 9.6 | 0.0061 | 2026-05-12 | Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to | |
CVE-2026-52736 |
high | 8.7 | 0.0061 | 2026-08-18 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthenticated P2P peer ca | |
CVE-2026-7639 |
high | 7.8 | 0.0018 | 2026-07-10 | Software installed and run as a non-privileged user may conduct a sequence of improper GPU system ca | |
CVE-2026-11576 |
high | 7.5 | 0.0046 | 2026-06-19 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP | |
CVE-2026-113658 |
high | 7.5 | 0.0062 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthentica | |
CVE-2026-88041 |
high | 7.5 | 0.0025 | 2026-10-20 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous req | |
CVE-2026-93446 |
high | 7.5 | 0.0025 | 2026-10-20 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermitte | |
CVE-2026-115478 |
high | 7.1 | 0.0032 | 2026-10-23 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 | |
CVE-2026-72714 |
medium | 6.8 | 0.0018 | 2026-08-24 | Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module t | |
CVE-2026-68809 |
medium | 5.5 | 0.0043 | 2026-08-11 | Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose inform | |
CVE-2026-6830 |
medium | 4.8 | 0.0011 | 2026-04-21 | nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching | |
CVE-2026-0427 |
medium | 4.6 | 0.0011 | 2026-05-15 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attack | |
CVE-2026-35361 |
medium | 4.4 | 0.0014 | 2026-04-22 | The mknod utility in uutils coreutils fails to handle security labels atomically by creating device | |
CVE-2026-19019 |
low | 2.9 | 0.0049 | 2026-08-06 | A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function Work | |
CVE-2026-67442 |
low | 2.0 | 0.0032 | 2026-08-18 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.3.3, DELETE /ap | |
CVE-2026-116132 |
— | — | 0.0034 | 2026-10-28 | HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart uplo |