Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-119210 |
medium | 5.9 | — | 2026-10-29 | MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases | |
CVE-2026-7633 |
medium | 5.5 | 0.0033 | 2026-05-02 | A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function set | |
CVE-2026-46383 |
medium | 5.5 | 0.0045 | 2026-05-15 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, | |
CVE-2026-12480 |
medium | 5.5 | 0.0019 | 2026-07-01 | Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an in | |
CVE-2026-114253 |
medium | 5.3 | 0.0033 | 2026-10-21 | A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f | |
CVE-2026-114379 |
medium | 5.3 | 0.0027 | 2026-10-21 | A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the functio | |
CVE-2026-40086 |
medium | 5.3 | 0.0059 | 2026-04-10 | Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the | |
CVE-2026-90871 |
medium | 5.3 | — | 2026-10-29 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versi | |
CVE-2026-18751 |
medium | 5.2 | 0.0018 | 2026-08-18 | External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue af | |
CVE-2026-0259 |
medium | 5.0 | 0.0034 | 2026-05-13 | An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B | |
CVE-2026-106494 |
medium | 4.9 | 0.0031 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backe | |
CVE-2026-57916 |
medium | 4.6 | 0.0011 | 2026-07-27 | proCertum SmartSign opens Certificate Practice Statement (CPS) URI without schema validation. An att | |
CVE-2026-56390 |
medium | 4.6 | 0.0018 | 2026-07-29 | GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %h | |
CVE-2026-40421 |
medium | 4.3 | 0.0062 | 2026-05-12 | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized | |
CVE-2026-49358 |
low | 3.0 | 0.0017 | 2026-06-19 | PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version | |
CVE-2026-59819 |
low | 2.1 | 0.0057 | 2026-07-08 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83. | |
CVE-2026-15540 |
low | 2.1 | 0.0042 | 2026-07-13 | A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is | |
CVE-2026-15921 |
low | 2.1 | 0.0026 | 2026-07-15 | Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js version | |
CVE-2026-96656 |
— | — | 0.0179 | — | Plex Media Server contains an external control of file name or path vulnerability which can allow an | KEV |
CVE-2026-86147 |
— | — | 0.0020 | 2026-10-21 | External control of file name or path and uncontrolled resource consumption in Apache bRPC (version | |
CVE-2026-118561 |
— | — | — | 2026-10-30 | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traver |