Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-46448 |
high | 8.5 | 0.0027 | 2026-06-16 | In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulti | |
CVE-2026-14151 |
high | 8.3 | 0.0033 | 2026-06-30 | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-71194 |
medium | 6.8 | 0.0052 | 2026-08-12 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving re | |
CVE-2026-114722 |
medium | 6.5 | 0.0025 | 2026-10-22 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML m | |
CVE-2026-41525 |
medium | 6.5 | 0.0013 | 2026-04-28 | KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open f | |
CVE-2026-41030 |
medium | 6.2 | 0.0016 | 2026-04-16 | In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on | |
CVE-2026-98125 |
medium | 5.5 | 0.0012 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cach | |
CVE-2026-44599 |
medium | 5.3 | 0.0029 | 2026-05-07 | Tor before 0.4.9.7 can attempt or accept BEGIN_DIR via conflux legs, aka TROVE-2026-008. | |
CVE-2026-40552 |
medium | 4.7 | 0.0029 | 2026-04-28 | Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access | |
CVE-2026-93856 |
medium | 4.3 | 0.0037 | 2026-10-21 | In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages A | |
CVE-2026-73281 |
low | 3.5 | 0.0016 | 2026-08-11 | In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur o | |
CVE-2026-31431 |
— | — | 0.9811 | — | Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow | KEV |