Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-11972 |
high | 8.2 | 0.0072 | 2026-06-23 | When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile modul | |
CVE-2026-62901 |
high | 7.5 | 0.0123 | 2026-08-11 | Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a ne | |
CVE-2026-118037 |
high | 7.5 | 0.0027 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-33814 |
high | 7.5 | 0.0084 | 2026-05-07 | When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATIO | |
CVE-2026-39820 |
high | 7.5 | 0.0078 | 2026-05-07 | Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger exce | |
CVE-2026-33800 |
high | 7.1 | 0.0027 | 2026-07-09 | An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper | |
CVE-2026-66276 |
medium | 6.5 | 0.0065 | 2026-08-05 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessi | |
CVE-2026-67554 |
medium | 6.5 | 0.0065 | 2026-08-05 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessi | |
CVE-2026-68077 |
medium | 6.5 | 0.0065 | 2026-08-05 | An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessi | |
CVE-2026-15172 |
medium | 5.5 | 0.0014 | 2026-07-08 | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of | |
CVE-2026-71439 |
medium | 5.3 | 0.0053 | 2026-08-06 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and char | |
CVE-2026-0243 |
medium | 4.9 | 0.0017 | 2026-05-13 | A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an u | |
CVE-2026-33891 |
— | — | 0.0061 | 2026-03-27 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScrip | |
CVE-2026-41606 |
— | — | 0.0110 | 2026-04-28 | Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.2 | |
CVE-2026-42561 |
— | — | 0.0074 | 2026-05-13 | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a |