Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-76531 |
critical | 9.9 | 0.0041 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted | |
CVE-2026-46651 |
critical | 9.8 | 0.0038 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-33698 |
critical | 9.3 | 0.0032 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38, a chained attack can enable otherwise | |
CVE-2026-21589 |
critical | 9.3 | 0.9948 | 2026-10-05 | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management | KEV 13 PoC |
CVE-2026-40484 |
critical | 9.1 | 0.0087 | 2026-04-18 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backu | |
CVE-2026-67073 |
high | 8.6 | 0.0022 | 2026-10-28 | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. | |
CVE-2026-40631 |
high | 8.5 | 0.0025 | 2026-05-13 | An authenticated attacker with the Resource Administrator or Administrator role can modify configura | |
CVE-2026-114400 |
high | 8.2 | 0.0055 | 2026-10-21 | Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated a | |
CVE-2023-22974 |
high | 7.5 | 0.0189 | 2023-02-22 | A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitra | |
CVE-2026-39871 |
high | 7.5 | 0.0031 | 2026-05-11 | A path handling issue was addressed with improved logic. This issue is fixed in macOS Sequoia 15.7.7 | |
CVE-2026-45088 |
high | 7.5 | 0.0031 | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, whe | |
CVE-2026-57990 |
high | 7.4 | 0.0092 | 2026-07-26 | Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an una | |
CVE-2025-3025 |
high | 7.3 | 0.0014 | 2025-09-15 | Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Window | |
CVE-2026-7817 |
high | 7.1 | 0.0022 | 2026-05-11 | Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM A | |
CVE-2026-42063 |
medium | 6.9 | 0.0029 | 2026-05-13 | A vulnerability exists in iControl SOAP where an authenticated attacker with the Resource Administra | |
CVE-2026-85840 |
medium | 6.5 | 0.0095 | 2026-10-13 | Files or directories accessible to external parties in Windows Event Viewer allows an authorized att | |
CVE-2026-88137 |
medium | 6.5 | 0.0095 | 2026-10-13 | Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl | |
CVE-2026-33380 |
medium | 6.5 | 0.0037 | 2026-05-13 | A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the | |
CVE-2026-8704 |
medium | 6.5 | 0.0032 | 2026-05-15 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. | |
CVE-2026-85812 |
medium | 5.5 | 0.0049 | 2026-10-13 | Files or directories accessible to external parties in Windows Bind Filter Driver allows an authoriz | |
CVE-2026-96857 |
medium | 5.5 | 0.0038 | 2026-10-13 | Files or directories accessible to external parties in Windows Projected File System allows an autho | |
CVE-2026-32185 |
medium | 5.5 | 0.0047 | 2026-05-12 | Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attack | |
CVE-2026-35440 |
medium | 5.5 | 0.0045 | 2026-05-12 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized | |
CVE-2026-13533 |
medium | 5.5 | 0.0048 | 2026-06-29 | A security vulnerability has been detected in agentejo Cockpit CMS up to 0.12.2. Affected by this is | |
CVE-2023-29107 |
medium | 5.3 | 0.0065 | 2023-05-09 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), | |
CVE-2026-65210 |
medium | 4.9 | 0.0023 | 2026-10-27 | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesy | |
CVE-2026-119201 |
medium | 4.8 | — | 2026-10-29 | Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores | |
CVE-2026-6418 |
medium | 4.6 | 0.0056 | 2026-05-05 | An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0 | |
CVE-2026-87348 |
medium | 4.2 | 0.0016 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Upda | |
CVE-2025-11371 |
— | — | 0.9214 | — | Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vuln | KEV |