Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-56288 |
medium | 4.6 | 0.0011 | 2026-07-09 | GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-di | |
CVE-2026-12051 |
medium | 4.6 | 0.0023 | 2026-08-11 | The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contain | |
CVE-2026-50126 |
medium | 4.0 | 0.0018 | 2026-08-18 | Adaguc-server is an open source geographical information system to visualize, combine, compare and s | |
CVE-2026-105923 |
medium | 4.0 | 0.0012 | 2026-10-21 | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in | |
CVE-2026-47327 |
low | 3.3 | 0.0009 | 2026-05-28 | Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the | |
CVE-2026-84392 |
low | 2.7 | 0.0107 | 2026-09-08 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all version | |
CVE-2026-44638 |
low | 2.5 | 0.0013 | 2026-05-14 | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, a | |
CVE-2026-55783 |
low | 2.4 | 0.0017 | 2026-07-10 | NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan | |
CVE-2026-93588 |
low | 2.3 | 0.0027 | 2026-09-18 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM code | |
CVE-2026-7701 |
low | 2.1 | 0.0039 | 2026-05-03 | A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affec | |
CVE-2026-8781 |
low | 2.1 | 0.0030 | 2026-05-18 | A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the | |
CVE-2026-8782 |
low | 2.1 | 0.0030 | 2026-05-18 | A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function | |
CVE-2026-8783 |
low | 2.1 | 0.0040 | 2026-05-18 | A security vulnerability has been detected in omec-project amf up to 2.1.3-dev. This impacts the fun | |
CVE-2026-96432 |
low | 2.1 | 0.0033 | 2026-10-26 | A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed | |
CVE-2026-15184 |
low | 1.9 | 0.0017 | 2026-07-09 | A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_nex | |
CVE-2026-57434 |
low | 1.7 | 0.0046 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-1584 |
— | — | 0.0132 | 2026-04-09 | A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sen | |
CVE-2026-34662 |
— | — | 0.0016 | 2026-05-12 | Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerabili | |
CVE-2026-12329 |
— | — | 0.0031 | 2026-06-16 | Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.1 | |
CVE-2026-47220 |
— | — | 0.0066 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 u | |
CVE-2026-65412 |
— | — | 0.0047 | 2026-09-14 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS | |
CVE-2026-78058 |
— | — | 0.0031 | 2026-10-21 | Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) |