Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-53800 |
medium | 5.7 | 0.0014 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feat | |
CVE-2026-15788 |
medium | 5.6 | 0.0041 | 2026-07-20 | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not dete | |
CVE-2026-16980 |
medium | 5.5 | 0.0014 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of serv | |
CVE-2026-83507 |
medium | 5.5 | 0.0050 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic | |
CVE-2026-49180 |
medium | 5.5 | 0.0044 | 2026-07-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) | |
CVE-2026-70348 |
medium | 5.5 | 0.0044 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Management Services allows | |
CVE-2026-72971 |
medium | 5.5 | 0.0036 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Fil | |
CVE-2026-97790 |
medium | 5.5 | 0.0039 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Fil | |
CVE-2026-62687 |
medium | 5.5 | 0.0050 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an au | |
CVE-2026-70264 |
medium | 5.5 | 0.0049 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Defender allows an autho | |
CVE-2026-83933 |
medium | 5.5 | 0.0049 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic | |
CVE-2026-32212 |
medium | 5.5 | 0.0031 | 2026-04-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) | |
CVE-2026-20161 |
medium | 5.5 | 0.0013 | 2026-04-15 | A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, loca | |
CVE-2026-58198 |
medium | 5.5 | 0.0014 | 2026-07-09 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2. | |
CVE-2026-58414 |
medium | 5.5 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentMa | |
CVE-2026-65065 |
medium | 5.5 | 0.0015 | 2026-07-21 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file | |
CVE-2026-43765 |
medium | 5.5 | 0.0018 | 2026-07-27 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15 | |
CVE-2026-15059 |
medium | 5.5 | 0.0016 | 2026-08-10 | Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a | |
CVE-2026-35345 |
medium | 5.3 | 0.0010 | 2026-04-22 | A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive fil | |
CVE-2026-58203 |
medium | 5.3 | 0.0019 | 2026-07-06 | pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecre | |
CVE-2026-62239 |
medium | 5.3 | 0.0016 | 2026-07-13 | FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability | |
CVE-2026-4135 |
medium | 5.2 | 0.0012 | 2026-04-15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software | |
CVE-2026-41610 |
medium | 5.0 | 0.0060 | 2026-05-12 | Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studi | |
CVE-2026-54055 |
medium | 5.0 | 0.0007 | 2026-06-12 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalat | |
CVE-2026-46464 |
medium | 4.9 | 0.0062 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-14699 |
medium | 4.8 | 0.0017 | 2026-07-05 | A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the | |
CVE-2026-15621 |
medium | 4.8 | 0.0020 | 2026-07-14 | A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/wr | |
CVE-2026-61858 |
medium | 4.8 | 0.0025 | 2026-07-11 | ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external | |
CVE-2026-61859 |
medium | 4.8 | 0.0017 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in | |
CVE-2026-69969 |
medium | 4.7 | 0.0037 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service al | |
CVE-2026-35359 |
medium | 4.7 | 0.0013 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows a | |
CVE-2026-5061 |
medium | 4.7 | 0.0015 | 2026-05-12 | The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file | |
CVE-2026-14361 |
medium | 4.7 | 0.0013 | 2026-07-08 | The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the w | |
CVE-2026-113721 |
medium | 4.5 | 0.0014 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplat | |
CVE-2026-113724 |
medium | 4.5 | 0.0020 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_d | |
CVE-2026-113716 |
medium | 4.5 | 0.0014 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builti | |
CVE-2026-46406 |
medium | 4.4 | 0.0015 | 2026-06-29 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wro | |
CVE-2026-44269 |
medium | 4.4 | 0.0017 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through | |
CVE-2026-46468 |
medium | 4.4 | 0.0017 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-106566 |
medium | 4.4 | 0.0014 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-65069 |
medium | 4.0 | 0.0017 | 2026-07-21 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file an | |
CVE-2026-64614 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open | |
CVE-2026-64617 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65061 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65062 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and | |
CVE-2026-65063 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and | |
CVE-2026-65064 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and op | |
CVE-2026-65066 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and | |
CVE-2026-65067 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65068 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file an |