Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-42160 |
critical | 10.0 | 0.0032 | 2026-05-08 | Data Space Portal is an open-source Software as a Service (SaaS) solution designed to streamline Dat | |
CVE-2026-64813 |
critical | 10.0 | 0.0052 | 2026-07-23 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote | |
CVE-2026-13901 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-14109 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-59504 |
critical | 9.1 | 0.0043 | 2026-08-13 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon t | |
CVE-2026-13903 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-14036 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-14041 |
high | 8.8 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-14086 |
high | 8.8 | 0.0041 | 2026-06-30 | Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-46485 |
high | 8.2 | 0.0038 | 2026-07-15 | Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow | |
CVE-2026-67363 |
high | 7.7 | 0.0056 | 2026-08-19 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The | |
CVE-2026-73267 |
high | 7.7 | 0.0063 | 2026-08-21 | A flaw was found in the clusterclaims-controller component of multicluster engine (MCE). A tenant wi | |
CVE-2026-57912 |
high | 7.5 | 0.0042 | 2026-06-26 | Johnson & Johnson Campus Recruiting before 2025-10-31 allows viewing of data provided by recruited s | |
CVE-2026-57913 |
high | 7.5 | 0.0042 | 2026-06-26 | Johnson & Johnson Audit Tracking Management System (ATMS) before 2026-04-21 allows viewing of meetin | |
CVE-2026-56256 |
high | 7.1 | 0.0030 | 2026-06-24 | Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive O | |
CVE-2026-16480 |
high | 7.1 | 0.0034 | 2026-08-12 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vu | |
CVE-2026-63301 |
high | 7.0 | 0.0057 | 2026-07-28 | In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitti | |
CVE-2026-65051 |
medium | 6.9 | 0.0049 | 2026-07-21 | Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-side securi | |
CVE-2026-56693 |
medium | 6.8 | 0.0016 | 2026-06-23 | NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent delivery-ac | |
CVE-2023-0704 |
medium | 6.5 | 0.0098 | 2023-02-07 | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote | |
CVE-2026-13795 |
medium | 6.5 | 0.0027 | 2026-06-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 all | |
CVE-2026-13871 |
medium | 6.5 | 0.0030 | 2026-06-30 | Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13894 |
medium | 6.5 | 0.0021 | 2026-06-30 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attack | |
CVE-2026-13896 |
medium | 6.5 | 0.0026 | 2026-06-30 | Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-13919 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13930 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14007 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14033 |
medium | 6.5 | 0.0035 | 2026-06-30 | Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed | |
CVE-2026-14081 |
medium | 6.5 | 0.0022 | 2026-06-30 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attac | |
CVE-2026-17703 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 all | |
CVE-2026-17756 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-17805 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-17813 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 all | |
CVE-2026-17821 |
medium | 6.5 | 0.0023 | 2026-07-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an att | |
CVE-2026-17953 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowe | |
CVE-2026-17974 |
medium | 6.5 | 0.0023 | 2026-07-30 | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local | |
CVE-2026-17985 |
medium | 6.5 | 0.0030 | 2026-07-30 | Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-110314 |
medium | 6.3 | 0.0038 | 2026-10-26 | Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling o | |
CVE-2026-116605 |
medium | 5.5 | 0.0030 | 2026-10-27 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is | |
CVE-2026-117554 |
medium | 5.3 | 0.0029 | 2026-10-27 | Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated me | |
CVE-2026-14047 |
medium | 4.3 | 0.0022 | 2026-06-30 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an att | |
CVE-2026-14054 |
medium | 4.3 | 0.0029 | 2026-06-30 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14075 |
medium | 4.3 | 0.0025 | 2026-06-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 all | |
CVE-2026-15130 |
medium | 4.3 | 0.0027 | 2026-07-08 | Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a rem | |
CVE-2026-13724 |
medium | 4.3 | 0.0028 | 2026-07-20 | Client-Side Enforcement of Server-Side Security vulnerability in Gobito Informatics Technologies Eng | |
CVE-2026-17960 |
medium | 4.3 | 0.0025 | 2026-07-30 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 all | |
CVE-2026-65938 |
medium | 4.3 | 0.0025 | 2026-08-12 | In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Sc |