Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-34841 |
critical | 9.8 | 0.0023 | 2026-04-06 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a | |
CVE-2026-13433 |
critical | 9.6 | 0.0017 | 2026-08-12 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified | |
CVE-2026-66398 |
critical | 9.4 | 0.0041 | 2026-07-27 | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that | |
CVE-2026-9037 |
critical | 9.3 | 0.0025 | 2026-05-28 | A firmware update mechanism in the affected charging controller fails to validate the authenticity o | |
CVE-2026-50562 |
critical | 9.3 | 0.0021 | 2026-07-15 | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c | |
CVE-2026-48046 |
critical | 9.3 | 0.0036 | 2026-08-11 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions p | |
CVE-2026-32148 |
high | 8.9 | 0.0019 | 2026-04-30 | Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger modul | |
CVE-2026-40066 |
high | 8.8 | 0.0041 | 2026-04-17 | Anviz CX2 Lite and CX7 are vulnerable to unverified update packages that can be uploaded. The device | |
CVE-2026-92092 |
high | 7.4 | — | 2026-10-29 | A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes | |
CVE-2026-0392 |
high | 7.3 | 0.0009 | 2026-08-03 | eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates ove | |
CVE-2026-12259 |
medium | 6.5 | 0.0010 | 2026-08-03 | In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes download | |
CVE-2026-3428 |
medium | 5.4 | 0.0007 | 2026-04-16 | A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center | |
CVE-2026-113717 |
low | 2.3 | 0.0029 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke. |