Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-53943 |
critical | 9.6 | 0.0045 | 2026-06-24 | Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared cach | |
CVE-2026-13007 |
high | 8.7 | 0.0061 | 2026-06-23 | Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose | |
CVE-2026-64792 |
high | 7.5 | 0.0042 | 2026-07-22 | Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Re | |
CVE-2026-65755 |
high | 7.5 | 0.0042 | 2026-07-23 | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Use | |
CVE-2026-108088 |
high | 7.5 | 0.0024 | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apach | |
CVE-2026-25703 |
high | 7.3 | 0.0080 | 2026-08-05 | NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to m | |
CVE-2026-64648 |
medium | 6.0 | 0.0034 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15 | |
CVE-2026-15743 |
medium | 5.7 | 0.0041 | 2026-08-20 | Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable | |
CVE-2026-44457 |
medium | 5.3 | 0.0020 | 2026-05-13 | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12. | |
CVE-2026-40012 |
medium | 5.3 | 0.0045 | 2026-06-25 | ECS zero scoped answers are stored in the packet cache while they should not. This impacts only conf | |
CVE-2026-54625 |
medium | 4.8 | 0.0018 | 2026-08-20 | django CMS is a content management system powered by Django. Prior to 5.0.8 and in 5.1.0a1, the djan | |
CVE-2026-94386 |
medium | 4.8 | 0.0034 | 2026-10-26 | Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. This | |
CVE-2026-105711 |
low | 3.5 | 0.0022 | 2026-10-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 | |
CVE-2026-22741 |
low | 3.1 | 0.0024 | 2026-04-29 | Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resource | |
CVE-2026-6907 |
low | 2.3 | 0.0036 | 2026-05-05 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. `django.middleware.cache.UpdateCa | |
CVE-2026-48588 |
low | 2.3 | 0.0043 | 2026-07-07 | An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` an |