Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2023-23697 |
low | 3.3 | 0.0018 | 2023-02-13 | Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vul | |
CVE-2026-116673 |
low | 3.3 | 0.0013 | 2026-10-27 | systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux ne | |
CVE-2026-64615 |
low | 3.3 | 0.0014 | 2026-07-21 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open | |
CVE-2026-64616 |
low | 3.3 | 0.0014 | 2026-07-21 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and op | |
CVE-2026-115569 |
low | 3.3 | 0.0019 | 2026-10-23 | Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fall | |
CVE-2026-44220 |
low | 3.2 | 0.0021 | 2026-05-12 | ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipelin | |
CVE-2026-14966 |
low | 3.1 | 0.0038 | 2026-07-08 | BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip a | |
CVE-2026-17435 |
low | 2.5 | 0.0014 | 2026-08-07 | File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rota | |
CVE-2026-12567 |
low | 2.2 | 0.0009 | 2026-06-17 | The github_workflows module constructs local directory paths from user-controlled repository names w | |
CVE-2026-15629 |
low | 2.1 | 0.0043 | 2026-07-14 | A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill | |
CVE-2026-17459 |
low | 2.1 | 0.0047 | 2026-07-26 | A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the functi | |
CVE-2026-19008 |
low | 2.1 | 0.0043 | 2026-08-06 | A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function a | |
CVE-2026-105081 |
low | 2.0 | 0.0011 | 2026-10-12 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in | |
CVE-2026-86424 |
low | 2.0 | 0.0014 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerabilit | |
CVE-2026-16077 |
low | 1.9 | 0.0021 | 2026-07-18 | A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function _normalize_r | |
CVE-2026-16130 |
low | 1.9 | 0.0017 | 2026-07-18 | A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function | |
CVE-2026-8784 |
low | 1.8 | 0.0016 | 2026-05-18 | A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_ | |
CVE-2026-0291 |
low | 1.1 | 0.0015 | 2026-08-13 | An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma | |
CVE-2026-86422 |
low | 1.0 | 0.0013 | 2026-09-07 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforc | |
CVE-2026-116271 |
— | — | 0.0019 | 2026-10-28 | MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and foll | |
CVE-2015-5287 |
— | — | 0.0500 | — | Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could | KEV |
CVE-2019-1069 |
— | — | 0.0612 | — | A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain | KEV |
CVE-2019-1130 |
— | — | 0.0172 | — | A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperl | KEV |
CVE-2019-1385 |
— | — | 0.0360 | — | A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly p | KEV |
CVE-2020-0638 |
— | — | 0.0237 | — | Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privileg | KEV |
CVE-2020-0787 |
— | — | 0.4252 | — | Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly hand | KEV |
CVE-2021-41379 |
— | — | 0.1945 | — | Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalati | KEV |
CVE-2022-30333 |
— | — | 0.9923 | — | RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to | KEV |
CVE-2025-21391 |
— | — | 0.0228 | — | Microsoft Windows Storage contains a link following vulnerability that could allow for privilege esc | KEV |
CVE-2025-48384 |
— | — | 0.0438 | — | Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage | KEV |
CVE-2025-60710 |
— | — | 0.0461 | — | Microsoft Windows contains a link following vulnerability that allows for privilege escalation | KEV |
CVE-2026-43998 |
— | — | 0.0072 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can | |
CVE-2026-41091 |
— | — | 0.0820 | — | Microsoft Defender contains a link following vulnerability that allows an authorized attacker to ele | KEV |
CVE-2026-9804 |
— | — | 0.0052 | 2026-05-28 | A flaw was found in KubeVirt's virt-exportserver component. An attacker with specific namespace-leve | |
CVE-2026-81963 |
— | — | 0.0039 | — | Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker | KEV |
CVE-2026-84584 |
— | — | 0.0019 | 2026-09-14 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gat |