Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2608)
CWE-79 (1775)
CWE-416 (1278)
CWE-862 (1126)
CWE-89 (1088)
CWE-22 (1003)
CWE-125 (861)
CWE-200 (836)
CWE-306 (831)
CWE-122 (821)
CWE-20 (785)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (530)
CWE-400 (510)
CWE-269 (499)
CWE-119 (493)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-75595 |
critical | 9.1 | 0.0032 | 2026-08-19 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2. | |
CVE-2026-33790 |
high | 8.7 | 0.0032 | 2026-04-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of | |
CVE-2026-35225 |
high | 8.7 | 0.0041 | 2026-04-23 | An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS E | |
CVE-2026-33794 |
high | 8.2 | 0.0040 | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding t | |
CVE-2026-57022 |
high | 8.2 | 0.0040 | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engin | |
CVE-2026-63841 |
high | 7.8 | 0.0017 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63842 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63843 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63844 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-63847 |
high | 7.8 | 0.0018 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fe | |
CVE-2026-42349 |
high | 7.6 | 0.0025 | 2026-05-11 | Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect | |
CVE-2026-40069 |
high | 7.5 | 0.0027 | 2026-04-09 | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.1.0 to before 0.8.2, BSV::Network::ARC's | |
CVE-2026-6766 |
high | 7.5 | 0.0026 | 2026-04-21 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Fir | |
CVE-2026-6772 |
high | 7.5 | 0.0039 | 2026-04-21 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Fir | |
CVE-2026-69185 |
high | 7.5 | 0.0063 | 2026-08-03 | Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3. | |
CVE-2026-33781 |
high | 7.1 | 0.0016 | 2026-04-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin | |
CVE-2026-57020 |
high | 7.1 | 0.0027 | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin | |
CVE-2026-33774 |
medium | 6.9 | 0.0017 | 2026-04-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin | |
CVE-2026-40343 |
medium | 6.9 | 0.0863 | 2026-04-22 | free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generat | |
CVE-2026-115385 |
medium | 6.9 | 0.0011 | 2026-10-22 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in | |
CVE-2026-33786 |
medium | 6.8 | 0.0009 | 2026-04-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon | |
CVE-2026-33787 |
medium | 6.8 | 0.0009 | 2026-04-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon | |
CVE-2026-20486 |
medium | 6.7 | 0.0017 | 2026-08-03 | In imgsensor, there is a possible application crash due to incorrect error handling. This could lead | |
CVE-2026-0262 |
medium | 6.6 | 0.0036 | 2026-05-13 | Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthent | |
CVE-2025-10532 |
medium | 6.5 | 0.0033 | 2025-09-16 | Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firef | |
CVE-2026-116516 |
medium | 6.5 | 0.0036 | 2026-10-26 | Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before sli | |
CVE-2026-56812 |
medium | 6.3 | 0.0080 | 2026-07-07 | Improper Check for Unusual or Exceptional Conditions vulnerability in phoenixframework phoenix (Pres | |
CVE-2026-44621 |
medium | 5.9 | 0.0025 | 2026-07-22 | With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and config | |
CVE-2026-0235 |
medium | 5.8 | 0.0011 | 2026-05-13 | A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated | |
CVE-2026-98148 |
medium | 5.5 | 0.0011 | 2026-09-25 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_ | |
CVE-2026-34066 |
medium | 5.3 | 0.0024 | 2026-04-22 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior to version | |
CVE-2026-54269 |
medium | 5.3 | 0.0040 | 2026-06-22 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 8.6.0 and 7.6.3, p | |
CVE-2026-57031 |
medium | 5.3 | 0.0022 | 2026-07-09 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engin | |
CVE-2026-73429 |
medium | 5.3 | 0.0051 | 2026-08-12 | Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a rus | |
CVE-2026-73430 |
medium | 5.3 | 0.0060 | 2026-08-12 | Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can caus | |
CVE-2026-42950 |
medium | 5.1 | 0.0021 | 2026-05-13 | ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value | |
CVE-2026-0241 |
medium | 5.1 | 0.0034 | 2026-05-13 | Incorrect Authorization vulnerabilities in Trust Protection Foundation allow attackers to bypass acc | |
CVE-2026-11970 |
medium | 4.8 | 0.0016 | 2026-08-13 | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExt | |
CVE-2026-21007 |
medium | 4.4 | 0.0016 | 2026-04-13 | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows phys | |
CVE-2026-35366 |
medium | 4.4 | 0.0017 | 2026-04-22 | The printenv utility in uutils coreutils fails to display environment variables containing invalid U | |
CVE-2026-21764 |
medium | 4.3 | 0.0022 | 2026-07-17 | HCL DevOps Loop is affected by insufficient input validation that allows special characters where th | |
CVE-2026-13411 |
medium | 4.3 | 0.0032 | 2026-10-22 | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import c | |
CVE-2026-21009 |
medium | 4.1 | 0.0023 | 2026-04-13 | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical | |
CVE-2026-66774 |
low | 3.7 | 0.0035 | 2026-08-11 | SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges | |
CVE-2026-65904 |
low | 2.3 | 0.0027 | 2026-07-23 | DOMPurify through 3.3.3 fails to sanitize DOM elements passed via IN_PLACE mode when the element ori | |
CVE-2026-18852 |
low | 1.9 | 0.0016 | 2026-08-05 | A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79de | |
CVE-2025-39682 |
— | — | 0.0325 | — | Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the T | KEV |
CVE-2026-33939 |
— | — | 0.0063 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-8091 |
— | — | 0.0047 | 2026-05-07 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed i |