Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-16206 |
medium | 5.3 | 0.0037 | 2026-07-19 | A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue af | |
CVE-2026-115356 |
medium | 5.3 | 0.0021 | 2026-10-22 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kub | |
CVE-2024-8995 |
medium | 4.9 | 0.0019 | 2026-08-06 | Unused authorization codes issued to deleted users are not being properly invalidated or removed fro | |
CVE-2026-95663 |
medium | 4.8 | 0.0024 | 2026-10-26 | Insufficient Session Expiration vulnerability in Apache Camel Keycloak component. This issue affe | |
CVE-2026-0971 |
medium | 4.3 | 0.0018 | 2026-04-21 | An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML | |
CVE-2026-1272 |
medium | 4.3 | 0.0020 | 2026-04-23 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnera | |
CVE-2026-16970 |
medium | 4.2 | 0.0022 | 2026-07-30 | The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which | |
CVE-2026-117499 |
low | 3.7 | 0.0009 | 2026-10-27 | @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default ro | |
CVE-2026-3583 |
low | 3.1 | 0.0026 | 2026-10-28 | When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does no | |
CVE-2026-42172 |
low | 3.1 | 0.0024 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-56583 |
low | 3.1 | 0.0022 | 2026-07-21 | HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthoriz | |
CVE-2026-54238 |
low | 3.1 | 0.0021 | 2026-10-22 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to versio | |
CVE-2026-116894 |
low | 2.3 | 0.0016 | 2026-10-27 | REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers | |
CVE-2026-45757 |
low | 2.3 | 0.0027 | 2026-06-24 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8 | |
CVE-2026-49277 |
low | 2.3 | 0.0031 | 2026-06-24 | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8 | |
CVE-2025-71435 |
low | 2.3 | 0.0018 | 2026-10-17 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated use | |
CVE-2026-115362 |
low | 2.1 | 0.0020 | 2026-10-22 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRol | |
CVE-2026-22706 |
low | 2.1 | 0.0034 | 2026-05-14 | Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, cha | |
CVE-2026-12772 |
low | 2.1 | 0.0040 | 2026-06-21 | A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authe | |
CVE-2026-12796 |
low | 2.1 | 0.0057 | 2026-06-21 | A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redire | |
CVE-2026-14725 |
low | 2.1 | 0.0037 | 2026-07-05 | A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by thi | |
CVE-2025-0326 |
— | — | 0.0014 | 2026-10-21 | The system fails to invalidate existing access tokens associated with sub-organization users during |