Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-110063 |
critical | 10.0 | 0.0089 | 2026-10-22 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Mac | |
CVE-2026-63293 |
critical | 9.9 | 0.0059 | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write op | |
CVE-2026-63294 |
critical | 9.9 | 0.0088 | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve root command execution on the ho | |
CVE-2026-106486 |
critical | 9.9 | 0.0037 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin- | |
CVE-2026-57571 |
critical | 9.6 | 0.0081 | 2026-07-06 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler sa | |
CVE-2026-113678 |
critical | 9.4 | 0.0063 | 2026-10-20 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStat | |
CVE-2026-115377 |
critical | 9.4 | 0.0040 | 2026-10-22 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vuln | |
CVE-2026-70460 |
critical | 9.2 | 0.0045 | 2026-08-13 | rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to e | |
CVE-2026-25718 |
critical | 9.1 | 0.0056 | 2026-07-03 | Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowi | |
CVE-2026-53486 |
critical | 9.1 | 0.0075 | 2026-07-14 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction | |
CVE-2026-20310 |
critical | 9.1 | 0.0059 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst | |
CVE-2026-53793 |
critical | 9.1 | 0.0039 | 2026-08-13 | rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to es | |
CVE-2026-103401 |
high | 8.8 | — | 2026-10-28 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticat | |
CVE-2026-50438 |
high | 8.8 | 0.0037 | 2026-07-14 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an aut | |
CVE-2026-5161 |
high | 8.8 | 0.0033 | 2026-04-29 | Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Softw | |
CVE-2026-67368 |
high | 8.8 | 0.0102 | 2026-09-08 | Improper link resolution before file access ('link following') in SQL Server allows an authorized at | |
CVE-2026-8170 |
high | 8.7 | 0.0056 | 2026-07-20 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to saf | |
CVE-2026-71476 |
high | 8.7 | 0.0086 | 2026-08-06 | Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 an | |
CVE-2026-116682 |
high | 8.6 | 0.0054 | 2026-10-27 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1- | |
CVE-2026-35025 |
high | 8.6 | 0.0050 | 2026-06-24 | ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows aut | |
CVE-2026-53783 |
high | 8.6 | 0.0037 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in | |
CVE-2026-104068 |
high | 8.6 | 0.0066 | 2026-10-22 | JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulner | |
CVE-2023-53973 |
high | 8.5 | 0.0025 | 2025-12-22 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privi | |
CVE-2026-43989 |
high | 8.5 | 0.0015 | 2026-05-12 | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm | |
CVE-2026-44470 |
high | 8.5 | 0.0016 | 2026-05-13 | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple s | |
CVE-2026-53803 |
high | 8.5 | 0.0023 | 2026-08-13 | rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwri | |
CVE-2026-41433 |
high | 8.4 | 0.0019 | 2026-04-24 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard | |
CVE-2026-54369 |
high | 8.4 | 0.0015 | 2026-06-29 | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based fun | |
CVE-2026-54371 |
high | 8.4 | 0.0015 | 2026-06-29 | attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr ut | |
CVE-2026-53784 |
high | 8.4 | 0.0024 | 2026-08-13 | rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access file | |
CVE-2026-76037 |
high | 8.4 | 0.0015 | 2026-08-18 | Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed | |
CVE-2026-33748 |
high | 8.2 | 0.0048 | 2026-03-27 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and | |
CVE-2026-53801 |
high | 8.2 | 0.0029 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scannin | |
CVE-2026-23879 |
high | 8.0 | 0.0050 | 2026-06-24 | py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encr | |
CVE-2026-44711 |
high | 7.9 | 0.0024 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, s | |
CVE-2026-69414 |
high | 7.8 | 0.0132 | 2026-08-14 | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros | 2 PoC |
CVE-2026-16989 |
high | 7.8 | 0.0017 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileg | |
CVE-2026-85343 |
high | 7.8 | 0.0036 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authoriz | |
CVE-2026-88133 |
high | 7.8 | 0.0055 | 2026-10-13 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker t | |
CVE-2026-108304 |
high | 7.8 | 0.0012 | 2026-10-27 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-108305 |
high | 7.8 | 0.0014 | 2026-10-27 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-108306 |
high | 7.8 | 0.0014 | 2026-10-27 | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | |
CVE-2026-61358 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Accessibility Infrastructu | |
CVE-2026-62761 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth | |
CVE-2026-62776 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth | |
CVE-2026-62803 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth | |
CVE-2026-62807 |
high | 7.8 | 0.0037 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an auth | |
CVE-2026-49176 |
high | 7.8 | 0.0033 | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate priv | |
CVE-2026-50469 |
high | 7.8 | 0.0037 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Projected File System allo | |
CVE-2026-58636 |
high | 7.8 | 0.0037 | 2026-07-14 | Improper link resolution before file access ('link following') in Window PC Manager allows an author |