Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-39324 |
critical | 9.3 | 0.0027 | 2026-04-07 | Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Ses | |
CVE-2026-112352 |
critical | 9.1 | 0.0132 | 2026-10-27 | Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauth | |
CVE-2026-119128 |
critical | 9.1 | — | 2026-10-29 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that | |
CVE-2026-53871 |
high | 8.6 | 0.0037 | 2026-06-17 | Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cooki | |
CVE-2026-0257 |
high | 7.8 | 0.9501 | 2026-05-13 | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability that allows attackers to b | KEV |
CVE-2026-39963 |
medium | 6.9 | 0.0022 | 2026-04-15 | Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the serendipity_setCoo | |
CVE-2026-118661 |
medium | 6.5 | 0.0027 | 2026-10-28 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prio | |
CVE-2026-111749 |
low | 2.3 | 0.0038 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Hos |