Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-0156 |
high | 7.5 | 0.0022 | 2026-06-16 | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missi | |
CVE-2026-10852 |
high | 7.5 | 0.0047 | 2026-06-22 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to deni | |
CVE-2026-57873 |
high | 7.5 | 0.0035 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVisio | |
CVE-2026-57875 |
high | 7.5 | 0.0073 | 2026-06-26 | An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic o | |
CVE-2026-47204 |
high | 7.5 | 0.0045 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 u | |
CVE-2026-47221 |
high | 7.5 | 0.0044 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 u | |
CVE-2026-56017 |
high | 7.5 | 0.0049 | 2026-06-29 | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when th | |
CVE-2026-58250 |
high | 7.5 | 0.0074 | 2026-07-08 | NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Pr | |
CVE-2026-58101 |
high | 7.5 | 0.0031 | 2026-07-13 | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer derefer | |
CVE-2026-45816 |
high | 7.5 | 0.0103 | 2026-07-24 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This req | |
CVE-2026-47427 |
high | 7.5 | 0.0077 | 2026-07-28 | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function i | |
CVE-2026-52878 |
high | 7.5 | 0.0049 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 | |
CVE-2026-17510 |
high | 7.5 | 0.0061 | 2026-08-09 | Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attri | |
CVE-2026-72582 |
high | 7.5 | 0.0061 | 2026-08-10 | A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated rem | |
CVE-2026-11810 |
high | 7.5 | 0.0047 | 2026-08-10 | The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updateh | |
CVE-2026-17165 |
high | 7.5 | 0.0055 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of ser | |
CVE-2026-77692 |
high | 7.5 | 0.0656 | 2026-09-16 | An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptograp | |
CVE-2026-57486 |
high | 7.5 | 0.0041 | 2026-10-16 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlN | |
CVE-2026-96888 |
high | 7.5 | 0.0046 | 2026-10-21 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may a | |
CVE-2026-76492 |
high | 7.5 | 0.0036 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expresswa | |
CVE-2026-100353 |
high | 7.5 | 0.0034 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3fi | |
CVE-2026-119188 |
high | 7.5 | — | 2026-10-29 | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. | |
CVE-2026-70640 |
high | 7.3 | 0.0024 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LL | |
CVE-2026-8619 |
high | 7.1 | 0.0087 | 2026-08-20 | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 | |
CVE-2026-114046 |
high | 7.1 | 0.0035 | 2026-10-21 | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend t | |
CVE-2026-116740 |
high | 7.1 | 0.0033 | 2026-10-26 | libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() tha | |
CVE-2026-32894 |
high | 7.1 | 0.0028 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Obj | |
CVE-2026-40195 |
high | 7.1 | 0.0040 | 2026-05-06 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validatio | |
CVE-2026-40197 |
high | 7.1 | 0.0039 | 2026-05-06 | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validatio | |
CVE-2026-8063 |
high | 7.1 | 0.0023 | 2026-05-07 | An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeli | |
CVE-2026-52865 |
high | 7.1 | 0.0050 | 2026-07-15 | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remo | |
CVE-2026-13065 |
high | 7.1 | 0.0050 | 2026-07-22 | A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill wind | |
CVE-2026-66749 |
high | 7.1 | 0.0044 | 2026-07-28 | Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated a | |
CVE-2026-75618 |
high | 7.1 | 0.0038 | 2026-08-19 | Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker | |
CVE-2026-109939 |
high | 7.1 | 0.0033 | 2026-10-13 | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_orde | |
CVE-2026-109942 |
high | 7.1 | 0.0032 | 2026-10-13 | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/cor | |
CVE-2026-110829 |
high | 7.1 | 0.0031 | 2026-10-14 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel w | |
CVE-2026-110834 |
high | 7.1 | 0.0031 | 2026-10-14 | FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malic | |
CVE-2026-79976 |
high | 7.1 | 0.0026 | 2026-10-21 | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small ps | |
CVE-2026-69795 |
high | 7.0 | 0.0030 | 2026-10-13 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privil | |
CVE-2026-88076 |
high | 7.0 | 0.0028 | 2026-10-13 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges lo | |
CVE-2026-88079 |
high | 7.0 | 0.0028 | 2026-10-13 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate pri | |
CVE-2026-26173 |
high | 7.0 | 0.0016 | 2026-04-14 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windo | |
CVE-2026-58369 |
medium | 6.9 | 0.0064 | 2026-06-30 | Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org_full_name endpoint without authenticati | |
CVE-2026-47709 |
medium | 6.9 | 0.0018 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the | |
CVE-2026-17500 |
medium | 6.9 | 0.0072 | 2026-07-27 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit | |
CVE-2026-110491 |
medium | 6.9 | 0.0052 | 2026-10-22 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests | |
CVE-2026-43840 |
medium | 6.9 | 0.0034 | 2026-10-20 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticat | |
CVE-2026-62702 |
medium | 6.8 | 0.0098 | 2026-08-11 | Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service | |
CVE-2026-19026 |
medium | 6.8 | 0.0019 | 2026-08-05 | H5Z__filter_nbit in H5Znbit.c in HDF5 prior to 2.3.0 dereferences cd_values[0] through cd_values[4] |