Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2025-26399 |
— | — | 0.9012 | — | SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that | KEV |
CVE-2025-55182 |
— | — | 0.9980 | — | Meta React Server Components contains a remote code execution vulnerability that could allow unauthe | KEV |
CVE-2026-22016 |
— | — | 0.0070 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-6857 |
— | — | 0.0067 | 2026-04-22 | A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the Prot | |
CVE-2026-41316 |
— | — | 0.0113 | 2026-04-24 | ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) int | |
CVE-2026-40048 |
— | — | 0.0033 | 2026-04-27 | The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in | |
CVE-2026-40473 |
— | — | 0.0119 | 2026-04-27 | The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in | |
CVE-2026-40860 |
— | — | 0.0174 | 2026-04-27 | JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, des | |
CVE-2026-33454 |
— | — | 0.0149 | 2026-04-27 | The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter s | |
CVE-2026-40858 |
— | — | 0.0131 | 2026-04-27 | The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data r | |
CVE-2026-27172 |
— | — | 0.0123 | 2026-04-27 | The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegi | |
CVE-2026-42027 |
— | — | 0.0071 | 2026-05-04 | Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Aff | |
CVE-2026-45659 |
— | — | 0.8024 | — | Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows | KEV |
CVE-2026-45247 |
— | — | 0.2616 | — | Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that coul | KEV |
CVE-2026-53435 |
— | — | 0.5313 | 2026-06-10 | In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins | |
CVE-2026-50632 |
— | — | 0.0067 | 2026-06-12 | A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lea | |
CVE-2026-50633 |
— | — | 0.0089 | 2026-06-12 | A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can | |
CVE-2026-12569 |
— | — | 0.4605 | — | PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenti | KEV |