Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40370 |
high | 8.8 | 0.0056 | 2026-05-12 | External control of file name or path in SQL Server allows an authorized attacker to execute code ov | |
CVE-2026-57301 |
high | 8.8 | 0.0063 | 2026-06-24 | Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rathe | |
CVE-2026-15583 |
high | 8.6 | 0.0053 | 2026-07-15 | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate | |
CVE-2026-34327 |
high | 8.2 | 0.0064 | 2026-05-07 | Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows a | |
CVE-2026-32204 |
high | 7.8 | 0.0029 | 2026-05-12 | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevat | |
CVE-2026-30905 |
high | 7.8 | 0.0012 | 2026-05-13 | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer b | |
CVE-2026-55389 |
high | 7.5 | 0.0055 | 2026-07-28 | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct fr | |
CVE-2026-55390 |
high | 7.5 | 0.0055 | 2026-07-28 | datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.6 | |
CVE-2026-41107 |
high | 7.4 | 0.0065 | 2026-05-12 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta | |
CVE-2026-68562 |
medium | 6.2 | 0.0038 | 2026-07-30 | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a m | |
CVE-2026-12879 |
medium | 5.9 | 0.0030 | 2026-07-09 | An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to | |
CVE-2026-67077 |
medium | 4.2 | 0.0012 | 2026-10-28 | HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an atta | |
CVE-2026-12788 |
low | 2.1 | 0.0040 | 2026-06-21 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1 |