Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-28698 |
critical | 9.2 | 0.0042 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to a | |
CVE-2026-44945 |
critical | 9.1 | 0.0056 | 2026-08-05 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests | |
CVE-2026-34413 |
high | 8.8 | 0.0311 | 2026-04-22 | Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in th | |
CVE-2026-56124 |
high | 8.7 | 0.0064 | 2026-06-29 | phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allow | |
CVE-2026-24222 |
high | 8.6 | 0.0040 | 2026-04-28 | NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where | |
CVE-2026-42047 |
high | 8.6 | 0.0038 | 2026-05-07 | Inngest is a platform for running event-driven and scheduled background functions with queueing, ret | |
CVE-2026-43654 |
high | 7.5 | 0.0035 | 2026-05-11 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS | |
CVE-2026-34891 |
high | 7.5 | 0.0030 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions. | |
CVE-2026-49056 |
high | 7.5 | 0.0037 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes a | |
CVE-2026-49066 |
high | 7.5 | 0.0029 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. | |
CVE-2026-49068 |
high | 7.5 | 0.0039 | 2026-06-15 | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. | |
CVE-2026-52694 |
high | 7.5 | 0.0024 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions. | |
CVE-2026-54824 |
high | 7.5 | 0.0042 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Ads by WPQuads <= 3.0.3 versions. | |
CVE-2026-56060 |
high | 7.5 | 0.0042 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 v | |
CVE-2026-59528 |
high | 7.5 | 0.0042 | 2026-07-27 | Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates <= 1.1.1 versions. | |
CVE-2026-59548 |
high | 7.5 | 0.0042 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. | |
CVE-2026-66462 |
high | 7.5 | 0.0042 | 2026-08-13 | Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. | |
CVE-2026-32468 |
high | 7.5 | 0.0042 | 2026-08-18 | Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions. | |
CVE-2026-111079 |
high | 7.4 | 0.0030 | 2026-10-22 | A flaw was found in Goose. When the terminal integration feature is enabled, the application capture | |
CVE-2025-34156 |
medium | 6.9 | 0.0037 | 2025-10-23 | Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenti | |
CVE-2026-41459 |
medium | 6.9 | 0.0080 | 2026-04-22 | Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that | |
CVE-2026-41928 |
medium | 6.9 | 0.0042 | 2026-05-07 | Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that al | |
CVE-2026-7864 |
medium | 6.9 | 0.1611 | 2026-05-08 | SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an | |
CVE-2026-44955 |
medium | 6.9 | 0.0034 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to a | |
CVE-2026-69127 |
medium | 6.9 | 0.0070 | 2026-08-07 | Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the | |
CVE-2026-97740 |
medium | 6.5 | 0.0086 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel | |
CVE-2026-40796 |
medium | 6.5 | 0.0034 | 2026-06-15 | Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. | |
CVE-2026-42660 |
medium | 6.5 | 0.0034 | 2026-06-15 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. | |
CVE-2026-48878 |
medium | 6.5 | 0.0034 | 2026-06-15 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. | |
CVE-2026-57316 |
medium | 6.5 | 0.0037 | 2026-06-26 | Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. | |
CVE-2026-57393 |
medium | 6.5 | 0.0037 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJ | |
CVE-2026-61945 |
medium | 6.5 | 0.0037 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVen | |
CVE-2026-6373 |
medium | 6.5 | 0.0026 | 2026-08-10 | Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Ne | |
CVE-2026-9307 |
medium | 6.3 | 0.0030 | 2026-06-16 | A sensitive information disclosure security issue exists within the affected CompactLogix controller | |
CVE-2026-50294 |
medium | 6.2 | 0.0051 | 2026-07-14 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows | |
CVE-2026-96865 |
medium | 5.6 | 0.0035 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel | |
CVE-2026-69644 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a | |
CVE-2026-70055 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic | |
CVE-2026-70260 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H | |
CVE-2026-70261 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H | |
CVE-2026-83835 |
medium | 5.5 | 0.0089 | 2026-10-13 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose | |
CVE-2026-96948 |
medium | 5.5 | 0.0052 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs | |
CVE-2026-108462 |
medium | 5.5 | 0.0089 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows | |
CVE-2026-70199 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows | |
CVE-2026-70232 |
medium | 5.5 | 0.0093 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows | |
CVE-2026-83705 |
medium | 5.5 | 0.0092 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allow | |
CVE-2026-83713 |
medium | 5.5 | 0.0095 | 2026-10-13 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a | |
CVE-2026-83773 |
medium | 5.5 | 0.0095 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M | |
CVE-2026-83893 |
medium | 5.5 | 0.0054 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User | |
CVE-2026-83907 |
medium | 5.5 | 0.0095 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows a |