Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46412 |
critical | 10.0 | 0.0076 | 2026-07-20 | @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with Op | |
CVE-2026-34841 |
critical | 9.8 | 0.0023 | 2026-04-06 | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a | |
CVE-2026-6443 |
critical | 9.8 | 0.0050 | 2026-04-17 | All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versi | |
CVE-2026-45321 |
critical | 9.6 | 0.0328 | 2026-05-12 | TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be | KEV |
CVE-2026-8398 |
critical | 9.3 | 0.0146 | 2026-05-15 | Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integr | KEV |
CVE-2026-48158 |
critical | 9.3 | 0.0067 | 2026-08-10 | use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and | |
CVE-2026-48159 |
critical | 9.3 | 0.0067 | 2026-08-10 | use-reducer-async is a React useReducer with async actions. Between 2026-05-18 16:29:52 and 2026-05- | |
CVE-2026-48160 |
critical | 9.3 | 0.0067 | 2026-08-10 | react-tracked provides state usage tracking with Proxies. Between 2026-05-18 19:26:36 and 2026-05-19 | |
CVE-2026-48161 |
critical | 9.3 | 0.0067 | 2026-08-10 | react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the de | |
CVE-2026-67595 |
critical | 9.2 | 0.0076 | 2026-07-29 | VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in t | |
CVE-2025-30066 |
— | — | 0.7209 | — | tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows | KEV |
CVE-2025-59374 |
— | — | 0.0120 | — | ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unau | KEV |
CVE-2026-48027 |
— | — | 0.0185 | — | Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx | KEV |