Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-119138 |
medium | 5.9 | — | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability th | |
CVE-2026-119139 |
medium | 5.9 | — | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::F | |
CVE-2026-119142 |
medium | 5.9 | — | 2026-10-29 | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability wh | |
CVE-2023-53683 |
medium | 5.5 | 0.0016 | 2025-10-07 | In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() f | |
CVE-2026-98147 |
medium | 5.5 | 0.0011 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_r | |
CVE-2026-10674 |
medium | 5.5 | 0.0014 | 2026-07-21 | The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFI | |
CVE-2026-34069 |
medium | 5.3 | 0.0030 | 2026-04-14 | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the A | |
CVE-2026-34066 |
medium | 5.3 | 0.0024 | 2026-04-22 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version | |
CVE-2026-13073 |
medium | 5.3 | 0.0037 | 2026-07-22 | An authenticated user with read-only privileges can cause the mongod process to terminate abnormally | |
CVE-2026-17574 |
medium | 5.2 | 0.0015 | 2026-07-27 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an | |
CVE-2026-62289 |
medium | 4.3 | 0.0030 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or | |
CVE-2026-62377 |
medium | 4.3 | 0.0041 | 2026-08-18 | libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF se | |
CVE-2026-17513 |
low | 1.9 | 0.0016 | 2026-07-27 | A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_g | |
CVE-2026-18581 |
low | 1.9 | 0.0016 | 2026-08-03 | A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown | |
CVE-2015-5477 |
— | — | 0.9958 | — | ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause | KEV |
CVE-2026-41523 |
— | — | 0.0091 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert | |
CVE-2026-56388 |
— | — | 0.0029 | 2026-10-21 | The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A re | |
CVE-2026-78048 |
— | — | 0.0024 | 2026-10-21 | A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in | |
CVE-2026-82210 |
— | — | 0.0019 | 2026-10-21 | Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms al | |
CVE-2026-82425 |
— | — | 0.0015 | 2026-10-21 | A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote p |