Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40583 |
high | 8.8 | 0.0038 | 2026-04-21 | UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit | |
CVE-2026-45033 |
high | 8.5 | 0.0035 | 2026-05-13 | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.4 | |
CVE-2026-41254 |
high | 7.5 | 0.0036 | 2026-04-18 | Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow | |
CVE-2026-114145 |
high | 7.5 | 0.0035 | 2026-10-21 | GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodu | |
CVE-2026-65219 |
high | 7.4 | 0.0045 | 2026-10-27 | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a special | |
CVE-2026-67217 |
medium | 6.9 | 0.0043 | 2026-07-29 | cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in cJSON | |
CVE-2026-44919 |
medium | 6.5 | 0.0047 | 2026-05-14 | In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum | |
CVE-2026-68930 |
medium | 6.5 | 0.0038 | 2026-08-03 | Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handle | |
CVE-2026-44600 |
medium | 5.3 | 0.0038 | 2026-05-07 | Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a | |
CVE-2026-56355 |
low | 3.7 | 0.0040 | 2026-06-20 | GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. |