Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-32217 |
medium | 5.5 | 0.0042 | 2026-04-14 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to | |
CVE-2026-32218 |
medium | 5.5 | 0.0044 | 2026-04-14 | Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to | |
CVE-2026-13750 |
medium | 5.5 | 0.0015 | 2026-06-29 | Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed pl | |
CVE-2026-12086 |
medium | 5.5 | 0.0014 | 2026-06-30 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevO | |
CVE-2026-56459 |
medium | 5.5 | 0.0015 | 2026-07-09 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application | |
CVE-2026-40633 |
medium | 5.5 | 0.0016 | 2026-07-15 | Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains | |
CVE-2026-19363 |
medium | 5.5 | 0.0067 | 2026-08-09 | A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function o | |
CVE-2026-18097 |
medium | 5.5 | 0.0015 | 2026-08-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 C | |
CVE-2026-21766 |
medium | 5.4 | 0.0029 | 2026-08-05 | The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently pr | |
CVE-2026-118647 |
medium | 5.3 | 0.0026 | 2026-10-28 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's A | |
CVE-2026-41182 |
medium | 5.3 | 0.0021 | 2026-04-23 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0. | |
CVE-2026-41495 |
medium | 5.3 | 0.0026 | 2026-05-08 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, a | |
CVE-2026-54236 |
medium | 5.3 | 0.0093 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fi | |
CVE-2026-113799 |
medium | 5.3 | 0.0038 | 2026-10-21 | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0. | |
CVE-2026-2607 |
medium | 5.1 | 0.0013 | 2026-05-27 | IBM MQ Operator SC2: v3.2.0 through 3.2.23CD: v3.3.0, v3.4.0, v3.4.1, v3.5.0, v3.5.1 - v3.5.3, v3.6 | |
CVE-2026-65589 |
medium | 5.1 | 0.0048 | 2026-07-22 | n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node ex | |
CVE-2026-105963 |
medium | 5.1 | 0.0051 | 2026-10-23 | Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in | |
CVE-2026-19600 |
medium | 4.9 | 0.0024 | 2026-10-16 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail t | |
CVE-2026-8200 |
medium | 4.8 | 0.0020 | 2026-05-13 | When schema validation is enabled on a collection and an update or insert would violate the collecti | |
CVE-2026-115657 |
medium | 4.8 | 0.0014 | 2026-10-23 | When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS | |
CVE-2026-114471 |
medium | 4.7 | 0.0010 | 2026-10-21 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServ | |
CVE-2026-40091 |
medium | 4.4 | 0.0017 | 2026-04-15 | SpiceDB is an open source database system for creating and managing security-critical application pe | |
CVE-2026-41004 |
medium | 4.4 | 0.0017 | 2026-05-07 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain | |
CVE-2026-49088 |
medium | 4.4 | 0.0032 | 2026-07-01 | Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclos | |
CVE-2026-112250 |
medium | 4.4 | 0.0017 | 2026-10-26 | A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under speci | |
CVE-2026-42282 |
medium | 4.3 | 0.0025 | 2026-05-08 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, a | |
CVE-2026-56457 |
medium | 4.3 | 0.0030 | 2026-06-29 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability | |
CVE-2026-8482 |
medium | 4.3 | 0.0023 | 2026-07-02 | A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to | |
CVE-2026-108328 |
medium | 4.2 | 0.0023 | 2026-10-27 | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Respons | |
CVE-2026-115885 |
medium | 4.1 | 0.0011 | 2026-10-23 | The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, la | |
CVE-2026-16648 |
low | 3.8 | 0.0025 | 2026-10-22 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remo | |
CVE-2026-44969 |
low | 3.3 | 0.0016 | 2026-07-16 | dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_to | |
CVE-2026-2401 |
low | 2.4 | 0.0010 | 2026-04-14 | CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause conf | |
CVE-2026-54711 |
low | 2.4 | 0.0016 | 2026-10-23 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object st | |
CVE-2026-115358 |
low | 2.0 | 0.0019 | 2026-10-22 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak | |
CVE-2026-4957 |
low | 2.0 | 0.0029 | 2026-03-27 | A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler. | |
CVE-2026-71474 |
— | — | 0.0016 | 2026-08-11 | A flaw was found in insights-client. When the application receives a non-200 response, it logs the r | |
CVE-2026-84513 |
— | — | 0.0016 | 2026-09-14 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fi | |
CVE-2026-84525 |
— | — | 0.0015 | 2026-09-14 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate | |
CVE-2026-84527 |
— | — | 0.0016 | 2026-09-14 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS |