Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48056 |
critical | 10.0 | 0.0055 | 2026-08-11 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions p | |
CVE-2026-55454 |
critical | 9.9 | 0.0060 | 2026-06-24 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bund | |
CVE-2026-53633 |
critical | 9.8 | 0.0090 | 2026-07-14 | Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vite | |
CVE-2026-66088 |
critical | 9.4 | — | 2026-10-29 | In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs s | |
CVE-2026-112780 |
critical | 9.3 | 0.0072 | 2026-10-19 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to | |
CVE-2026-109422 |
critical | 9.2 | 0.0052 | 2026-10-12 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a | |
CVE-2026-68823 |
critical | 9.1 | 0.0093 | 2026-08-06 | Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to e | |
CVE-2026-118606 |
high | 8.8 | — | 2026-10-28 | Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. Th | |
CVE-2026-33583 |
high | 8.7 | 0.0021 | 2026-05-13 | Exposure of the QKEY (used as input into the ‘OTA-Quantum’ device registration process) and interna | |
CVE-2026-116019 |
high | 8.7 | 0.0035 | 2026-10-24 | Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to inv | |
CVE-2026-70387 |
high | 8.4 | 0.0031 | 2026-10-21 | Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS o | |
CVE-2026-52877 |
high | 8.3 | 0.0041 | 2026-08-18 | Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to v | |
CVE-2026-35488 |
high | 8.1 | 0.0038 | 2026-04-07 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. | |
CVE-2026-113775 |
high | 7.8 | 0.0014 | 2026-10-27 | A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.L | |
CVE-2026-118602 |
high | 7.8 | — | 2026-10-28 | Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This v | |
CVE-2026-25266 |
high | 7.8 | 0.0007 | 2026-05-04 | Memory corruption while processing IOCTL command when device is in power-save state. | |
CVE-2026-8108 |
high | 7.8 | 0.0015 | 2026-05-12 | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write pe | |
CVE-2026-18901 |
high | 7.3 | 0.0085 | 2026-08-05 | A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.ad | |
CVE-2026-109556 |
high | 7.3 | 0.0065 | 2026-10-12 | EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the deskto | |
CVE-2026-20293 |
high | 7.1 | 0.0018 | 2026-09-08 | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UC | |
CVE-2026-12060 |
medium | 6.9 | 0.0031 | 2026-06-12 | Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, all | |
CVE-2026-45489 |
medium | 6.5 | 0.0088 | 2026-07-03 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | |
CVE-2026-8109 |
medium | 6.5 | 0.0070 | 2026-05-12 | An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 al | |
CVE-2026-20467 |
medium | 6.0 | 0.0017 | 2026-08-03 | In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lea | |
CVE-2026-54753 |
medium | 5.9 | 0.0120 | 2026-06-26 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and 23.0.0 | |
CVE-2026-33584 |
medium | 5.3 | 0.0031 | 2026-05-13 | Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthori | |
CVE-2026-76487 |
medium | 5.3 | 0.0061 | 2026-10-21 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communication | |
CVE-2026-7516 |
medium | 5.1 | 0.0017 | 2026-06-10 | A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets | |
CVE-2026-48783 |
medium | 4.8 | 0.0017 | 2026-06-17 | Postiz is an AI social media scheduling tool. Versions prior to 2.21.8 contained an unauthenticated | |
CVE-2010-0738 |
— | — | — | — | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs | KEV |
CVE-2010-1428 |
— | — | — | — | Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by defa | KEV |
CVE-2018-19322 |
— | — | — | — | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming | KEV |
CVE-2026-24118 |
— | — | 0.0091 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox br | |
CVE-2006-1547 |
— | — | — | — | ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that a | KEV |