Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-57234 |
low | 2.6 | 0.0020 | 2026-06-25 | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, | |
CVE-2026-12788 |
low | 2.1 | 0.0040 | 2026-06-21 | A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1 | |
CVE-2023-28828 |
— | — | 0.0059 | 2023-04-11 | A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains | |
CVE-2025-58360 |
— | — | 0.6117 | — | OSGeo GeoServer contains an improper restriction of XML external entity reference vulnerability that | KEV |
CVE-2026-26171 |
— | — | 0.0175 | 2026-04-14 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a net | |
CVE-2026-22016 |
— | — | 0.0070 | 2026-04-21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ | |
CVE-2026-40682 |
— | — | 0.0050 | 2026-05-04 | XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersis | |
CVE-2026-44020 |
— | — | 0.0060 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-12975 |
— | — | 0.0044 | 2026-06-25 | A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParse |