Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-45832 |
high | 8.8 | 0.0028 | 2026-06-12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database | |
CVE-2026-28808 |
high | 8.3 | 0.0056 | 2026-04-07 | Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to | |
CVE-2026-57920 |
high | 7.7 | 0.0038 | 2026-06-26 | Peplink InControl 2 through 2.14.2 before 2026-06-03 allows use of a semicolon to bypass access-cont | |
CVE-2026-87743 |
high | 7.5 | 0.0052 | 2026-09-18 | A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in | |
CVE-2026-0707 |
medium | 5.3 | 0.0040 | 2026-01-08 | A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regardin | |
CVE-2026-4636 |
— | — | 0.0043 | 2026-04-02 | A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Man | |
CVE-2026-22754 |
— | — | 0.0027 | 2026-04-22 | Vulnerability in Spring Spring Security. If an application uses <sec:intercept-url servlet-path="/se | |
CVE-2026-40022 |
— | — | 0.0094 | 2026-04-27 | When authentication is enabled on the Apache Camel embedded HTTP server or embedded management serve | |
CVE-2026-44573 |
— | — | 0.0080 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 | |
CVE-2026-44574 |
— | — | 0.0064 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 | |
CVE-2026-44575 |
— | — | 0.0159 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 | |
CVE-2026-50559 |
— | — | 0.0102 | 2026-06-19 | Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3 |