Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-74880 |
critical | 9.3 | 0.0056 | 2026-08-17 | openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and | |
CVE-2026-58656 |
high | 8.7 | 0.0035 | 2026-07-08 | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query parameter and respo | |
CVE-2026-62386 |
high | 8.2 | 0.0033 | 2026-07-17 | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through t | |
CVE-2026-54652 |
high | 8.1 | 0.0029 | 2026-07-08 | Frigate is an open source network video recorder. In version 0.17.1, the GET /api/logs/{service} end | |
CVE-2026-34020 |
high | 7.5 | 0.0051 | 2026-04-09 | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The RE | |
CVE-2026-9592 |
high | 7.5 | 0.0024 | 2026-07-17 | SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay | |
CVE-2026-15322 |
high | 7.5 | 0.0052 | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive inf | |
CVE-2026-14838 |
high | 7.4 | 0.0034 | 2026-08-04 | Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informati | |
CVE-2026-43875 |
medium | 6.8 | 0.0033 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/MobileMan | |
CVE-2026-2237 |
medium | 5.5 | 0.0009 | 2026-05-27 | A use of get request method with sensitive query strings vulnerability in volume encryption of Synol | |
CVE-2026-47768 |
medium | 5.5 | 0.0015 | 2026-07-28 | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to v | |
CVE-2026-113669 |
medium | 5.3 | 0.0042 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS | |
CVE-2026-34969 |
low | 2.3 | 0.0027 | 2026-04-06 | Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth | |
CVE-2025-32916 |
low | 1.0 | 0.0019 | 2025-10-09 | Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, |