Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-65816 |
critical | 10.0 | 0.0097 | 2026-08-20 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevat | |
CVE-2026-35039 |
critical | 9.1 | 0.0021 | 2026-04-06 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 0.0.1 to before 6.2.0, setting up a | |
CVE-2026-13097 |
high | 8.7 | 0.0075 | 2026-08-20 | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos pri | |
CVE-2026-62190 |
high | 8.7 | 0.0051 | 2026-07-13 | OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper | |
CVE-2026-29036 |
high | 8.7 | 0.0044 | 2026-08-11 | cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability | |
CVE-2026-114663 |
high | 8.6 | 0.0018 | 2026-10-22 | Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from im | |
CVE-2026-10696 |
high | 7.5 | 0.0027 | 2026-06-17 | Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026 | |
CVE-2026-13372 |
high | 7.2 | 0.0050 | 2026-06-26 | Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote | |
CVE-2026-57054 |
medium | 6.9 | 0.0037 | 2026-07-09 | A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper | |
CVE-2026-76039 |
medium | 6.5 | 0.0032 | 2026-08-18 | Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowe | |
CVE-2026-89313 |
medium | 6.3 | 0.0023 | 2026-10-23 | `JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refresh | |
CVE-2026-112909 |
medium | 6.1 | 0.0022 | 2026-10-20 | filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a | |
CVE-2026-35358 |
medium | 5.5 | 0.0018 | 2026-04-22 | The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats charac | |
CVE-2026-54282 |
medium | 5.3 | 0.0027 | 2026-06-22 | Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not vali | |
CVE-2026-42254 |
medium | 4.0 | 0.0016 | 2026-04-26 | Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is n | |
CVE-2026-14288 |
low | 3.1 | 0.0024 | 2026-10-22 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 bef | |
CVE-2026-16120 |
low | 2.1 | 0.0040 | 2026-07-18 | A vulnerability was determined in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This impacts the func |