Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-114575 |
critical | 10.0 | 0.0221 | 2026-10-22 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the funct | |
CVE-2026-44182 |
critical | 10.0 | 0.0063 | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like | |
CVE-2026-54159 |
critical | 10.0 | 0.0075 | 2026-07-17 | PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4 | |
CVE-2026-54680 |
critical | 9.9 | 0.0078 | 2026-07-29 | Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior t | |
CVE-2026-76473 |
critical | 9.8 | 0.0049 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams f | |
CVE-2026-20272 |
critical | 9.8 | 0.0057 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So | |
CVE-2026-87701 |
critical | 9.6 | 0.0079 | 2026-09-17 | Improper neutralization of special elements in output used by a downstream component ('injection') i | |
CVE-2026-115932 |
critical | 9.6 | 0.0043 | 2026-10-24 | When a post is published, Postiz treats a media path that is not a web address as a file on the serv | |
CVE-2026-116231 |
critical | 9.4 | 0.0044 | 2026-10-26 | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unkn | |
CVE-2026-116232 |
critical | 9.4 | 0.0044 | 2026-10-26 | A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp_set o | |
CVE-2026-116233 |
critical | 9.4 | 0.0046 | 2026-10-26 | A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown | |
CVE-2026-116234 |
critical | 9.4 | 0.0046 | 2026-10-26 | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the | |
CVE-2026-116235 |
critical | 9.4 | 0.0061 | 2026-10-26 | A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown | |
CVE-2026-116237 |
critical | 9.3 | 0.0035 | 2026-10-26 | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the compo | |
CVE-2026-41691 |
critical | 9.1 | 0.0031 | 2026-05-07 | Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that a | |
CVE-2026-48203 |
critical | 9.1 | 0.0060 | 2026-07-06 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), | |
CVE-2026-18601 |
high | 8.9 | 0.0362 | 2026-08-03 | A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the function ovpn-client.ch | |
CVE-2026-18602 |
high | 8.9 | 0.0362 | 2026-08-03 | A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-clien | |
CVE-2026-18612 |
high | 8.9 | 0.0397 | 2026-08-03 | A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plug | |
CVE-2026-18613 |
high | 8.9 | 0.0100 | 2026-08-03 | A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plu | |
CVE-2026-18614 |
high | 8.9 | 0.0362 | 2026-08-03 | A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the function s2s.enable_echo | |
CVE-2026-18615 |
high | 8.9 | 0.0362 | 2026-08-03 | A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the functio | |
CVE-2026-18616 |
high | 8.9 | 0.0362 | 2026-08-03 | A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the functio | |
CVE-2026-18684 |
high | 8.9 | 0.0362 | 2026-08-03 | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function rem | |
CVE-2026-18685 |
high | 8.9 | 0.0362 | 2026-08-04 | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the functio | |
CVE-2026-18686 |
high | 8.9 | 0.0473 | 2026-08-04 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function | |
CVE-2026-19348 |
high | 8.9 | 0.0357 | 2026-08-09 | A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is t | |
CVE-2026-41109 |
high | 8.8 | 0.0086 | 2026-05-12 | Improper neutralization of special elements in output used by a downstream component ('injection') i | |
CVE-2023-29525 |
high | 8.8 | 0.7775 | 2023-04-19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of | |
CVE-2023-31209 |
high | 8.8 | 0.0112 | 2023-08-10 | Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0 | |
CVE-2024-56835 |
high | 8.7 | 0.0051 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX | |
CVE-2026-55100 |
high | 8.7 | 0.0056 | 2026-07-31 | hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src | |
CVE-2026-76221 |
high | 8.7 | 0.0077 | 2026-08-19 | GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator | |
CVE-2026-116504 |
high | 8.6 | 0.0155 | 2026-10-26 | A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function | |
CVE-2026-116506 |
high | 8.6 | 0.0188 | 2026-10-26 | A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function a | |
CVE-2024-56838 |
high | 8.6 | 0.0039 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX | |
CVE-2024-56839 |
high | 8.6 | 0.0064 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX | |
CVE-2026-11311 |
high | 8.6 | 0.0057 | 2026-06-17 | When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability | |
CVE-2026-50107 |
high | 8.6 | 0.0049 | 2026-06-17 | When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an in | |
CVE-2026-48120 |
high | 8.6 | 0.0020 | 2026-08-07 | Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore | |
CVE-2026-116505 |
high | 8.5 | 0.0274 | 2026-10-26 | A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDe | |
CVE-2026-109961 |
high | 8.4 | 0.0022 | 2026-10-13 | Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated cu | |
CVE-2026-54661 |
high | 8.3 | 0.0048 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior | |
CVE-2026-54662 |
high | 8.3 | 0.0035 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior t | |
CVE-2026-54664 |
high | 8.3 | 0.0048 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior | |
CVE-2026-54666 |
high | 8.3 | 0.0036 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior | |
CVE-2026-33833 |
high | 8.2 | 0.0050 | 2026-05-12 | Improper neutralization of special elements in output used by a downstream component ('injection') i | |
CVE-2026-88094 |
high | 8.1 | 0.0082 | 2026-10-13 | Improper neutralization of special elements in output used by a downstream component ('injection') i | |
CVE-2024-56840 |
high | 7.5 | 0.0064 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX | |
CVE-2026-22744 |
high | 7.5 | 0.0026 | 2026-03-27 | In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed |