Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-12692 |
critical | 9.8 | 0.0064 | 2026-07-17 | Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentic | |
CVE-2026-77644 |
critical | 9.3 | 0.0043 | 2026-08-20 | A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliabili | |
CVE-2026-97380 |
high | 8.8 | 0.0128 | 2026-10-16 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1 | |
CVE-2026-56305 |
high | 8.7 | 0.0045 | 2026-07-10 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoin | |
CVE-2026-54801 |
high | 8.6 | 0.0062 | 2026-07-09 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.2 | |
CVE-2026-73292 |
high | 8.3 | 0.0023 | 2026-08-12 | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/pas | |
CVE-2026-40588 |
high | 8.1 | 0.0027 | 2026-04-21 | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, the password change form at | |
CVE-2026-42084 |
high | 8.1 | 0.0031 | 2026-05-04 | OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or mor | |
CVE-2013-20008 |
high | 7.0 | — | 2026-10-28 | Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to c | |
CVE-2026-118984 |
high | 7.0 | — | 2026-10-29 | OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holde | |
CVE-2026-17599 |
medium | 6.9 | 0.0049 | 2026-08-07 | Nexus Repository 3 contained an endpoint used to change the administrator account password during in | |
CVE-2026-44733 |
medium | 5.9 | 0.0028 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, Busin |