Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96293 |
medium | 6.9 | 0.0006 | 2026-10-22 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Di | |
CVE-2025-30051 |
medium | 6.8 | 0.0010 | 2026-10-23 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ | |
CVE-2026-103404 |
medium | 6.8 | 0.0023 | 2026-10-28 | An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper | |
CVE-2026-4482 |
medium | 6.8 | 0.0008 | 2026-04-10 | The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted | |
CVE-2026-13769 |
medium | 6.8 | 0.0017 | 2026-07-01 | Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like syst | |
CVE-2026-65940 |
medium | 6.8 | 0.0035 | 2026-08-12 | In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files t | |
CVE-2026-77060 |
medium | 6.8 | 0.0013 | 2026-10-26 | boneIO black_debian_images stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd w | |
CVE-2026-76261 |
medium | 6.5 | 0.0029 | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve | |
CVE-2026-62519 |
medium | 6.3 | 0.0026 | 2026-07-21 | Vulnerability in the Oracle Succession planning product of Oracle E-Business Suite (component: Succe | |
CVE-2026-50544 |
medium | 6.3 | 0.0013 | 2026-08-13 | NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version | |
CVE-2026-64613 |
medium | 6.2 | 0.0018 | 2026-07-21 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-15430 |
medium | 6.2 | 0.0015 | 2026-08-03 | Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, ve | |
CVE-2026-58174 |
medium | 6.0 | 0.0045 | 2026-06-30 | Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named p | |
CVE-2026-6369 |
medium | 5.7 | 0.0012 | 2026-04-20 | An improper access control vulnerability in the canonical-livepatch snap client prior to version 10. | |
CVE-2026-32315 |
medium | 5.5 | 0.0168 | 2026-06-24 | motionEye (mEye) is an online interface for motion software, a video surveillance program with motio | |
CVE-2026-65065 |
medium | 5.5 | 0.0015 | 2026-07-21 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file | |
CVE-2026-68563 |
medium | 5.5 | 0.0014 | 2026-07-30 | A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevat | |
CVE-2026-48790 |
medium | 5.5 | 0.0015 | 2026-08-11 | Turso CLI is the command line interface (CLI) to the open-source database Turso. Versions prior to 1 | |
CVE-2026-21011 |
medium | 5.4 | 0.0015 | 2026-04-13 | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allo | |
CVE-2026-42058 |
medium | 5.3 | 0.0019 | 2026-05-13 | An authenticated attacker's undisclosed requests to BIG-IP iControl REST can lead to an information | |
CVE-2026-8612 |
medium | 5.3 | 0.0013 | 2026-05-15 | WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world- | |
CVE-2023-31238 |
medium | 4.8 | 0.0043 | 2023-06-13 | A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM | |
CVE-2026-41686 |
medium | 4.8 | 0.0012 | 2026-05-04 | Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScrip | |
CVE-2026-50267 |
medium | 4.7 | 0.0006 | 2026-06-17 | Steeltoe is an open source project that provides a collection of libraries that helps users build cl | |
CVE-2026-7431 |
medium | 4.4 | 0.0018 | 2026-05-12 | An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22. | |
CVE-2026-44268 |
medium | 4.4 | 0.0015 | 2026-07-03 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through | |
CVE-2026-113720 |
medium | 4.4 | 0.0013 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-da | |
CVE-2023-32979 |
medium | 4.3 | 0.0050 | 2023-05-16 | Jenkins Email Extension Plugin does not perform a permission check in a method implementing form val | |
CVE-2026-65069 |
medium | 4.0 | 0.0017 | 2026-07-21 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file an | |
CVE-2026-64614 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open | |
CVE-2026-64617 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65061 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65062 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and | |
CVE-2026-65063 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and | |
CVE-2026-65064 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and op | |
CVE-2026-65066 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and | |
CVE-2026-65067 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and ope | |
CVE-2026-65068 |
low | 3.8 | 0.0014 | 2026-07-21 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file an | |
CVE-2025-40818 |
low | 3.3 | 0.0010 | 2025-12-09 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affec | |
CVE-2026-21727 |
low | 3.3 | 0.0020 | 2026-04-15 | A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy | |
CVE-2026-35367 |
low | 3.3 | 0.0011 | 2026-04-22 | The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying | |
CVE-2026-64615 |
low | 3.3 | 0.0014 | 2026-07-21 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open | |
CVE-2026-64616 |
low | 3.3 | 0.0014 | 2026-07-21 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and op | |
CVE-2026-32684 |
low | 2.9 | 0.0009 | 2026-05-12 | The application does not impose strict enough restrictions on directory access permissions, posing a | |
CVE-2026-6842 |
low | 2.5 | 0.0008 | 2026-04-22 | A flaw was found in nano. In environments with permissive umask settings, a local attacker can explo | |
CVE-2026-6499 |
low | 2.4 | 0.0010 | 2026-05-04 | Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto | |
CVE-2026-54327 |
low | 2.2 | 0.0009 | 2026-06-23 | Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi stored API keys and OAuth cred | |
CVE-2018-13374 |
— | — | 0.3809 | — | Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers | KEV |
CVE-2026-65348 |
— | — | 0.0015 | 2026-09-14 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and | |
CVE-2026-118574 |
— | — | — | 2026-10-30 | Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows |