Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-85793 |
medium | 5.5 | 0.0046 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Servic | |
CVE-2026-96935 |
medium | 5.5 | 0.0035 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an | |
CVE-2026-33617 |
medium | 5.3 | 0.0027 | 2026-04-02 | An unauthenticated remote attacker can access a configuration file containing database credentials. | |
CVE-2026-42644 |
medium | 5.3 | 0.0025 | 2026-04-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDevelo | |
CVE-2026-57633 |
medium | 5.3 | 0.0033 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions. | |
CVE-2026-57753 |
medium | 5.3 | 0.0033 | 2026-07-02 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versio | |
CVE-2026-61975 |
medium | 5.3 | 0.0033 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblo | |
CVE-2026-61976 |
medium | 5.3 | 0.0033 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblo | |
CVE-2026-61977 |
medium | 5.3 | 0.0033 | 2026-07-13 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblo | |
CVE-2026-65474 |
medium | 5.3 | 0.0033 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. | |
CVE-2026-65490 |
medium | 5.3 | 0.0033 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Mic | |
CVE-2026-65521 |
medium | 5.3 | 0.0033 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions. | |
CVE-2026-65564 |
medium | 5.3 | 0.0033 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. | |
CVE-2026-66438 |
medium | 5.3 | 0.0033 | 2026-07-27 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | |
CVE-2026-28169 |
medium | 5.3 | 0.0033 | 2026-08-06 | Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions. | |
CVE-2026-74007 |
medium | 5.3 | 0.0033 | 2026-08-18 | Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery | |
CVE-2026-76435 |
medium | 5.3 | 0.0043 | 2026-10-21 | A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain | |
CVE-2026-111946 |
medium | 5.3 | 0.0017 | 2026-10-19 | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the d | |
CVE-2026-0239 |
medium | 4.9 | 0.0017 | 2026-05-13 | An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticat | |
CVE-2026-85866 |
medium | 4.7 | 0.0036 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an | |
CVE-2026-83672 |
medium | 4.7 | 0.0073 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allo | |
CVE-2026-83774 |
medium | 4.7 | 0.0072 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S | |
CVE-2026-83897 |
medium | 4.7 | 0.0069 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S | |
CVE-2026-83905 |
medium | 4.7 | 0.0073 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a | |
CVE-2026-83909 |
medium | 4.7 | 0.0043 | 2026-10-13 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S | |
CVE-2026-83925 |
medium | 4.7 | 0.0072 | 2026-10-13 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio | |
CVE-2026-0240 |
medium | 4.5 | 0.0024 | 2026-05-13 | An information disclosure vulnerability in Trust Protection Foundation enables an authenticated atta | |
CVE-2025-66056 |
medium | 4.3 | 0.0027 | 2025-11-21 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny | |
CVE-2026-24618 |
medium | 4.3 | 0.0018 | 2026-06-12 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThem | |
CVE-2026-57664 |
medium | 4.3 | 0.0029 | 2026-06-26 | Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versio | |
CVE-2026-65458 |
medium | 4.3 | 0.0029 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby P | |
CVE-2026-65535 |
medium | 4.3 | 0.0029 | 2026-07-23 | Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions. | |
CVE-2026-58246 |
medium | 4.3 | 0.0024 | 2026-07-28 | SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier info | |
CVE-2026-56569 |
low | 3.3 | 0.0014 | 2026-07-31 | HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposur | |
CVE-2026-109823 |
low | 2.3 | 0.0037 | 2026-10-27 | An attacker can read the name of filesystem paths of your application present via Tidewave configura | |
CVE-2026-39572 |
— | — | 0.0019 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeop |