Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2605)
CWE-79 (1759)
CWE-416 (1278)
CWE-862 (1115)
CWE-89 (1087)
CWE-22 (1001)
CWE-125 (857)
CWE-200 (835)
CWE-306 (829)
CWE-122 (821)
CWE-20 (783)
CWE-78 (695)
CWE-918 (679)
CWE-787 (672)
CWE-94 (626)
CWE-863 (600)
CWE-74 (599)
CWE-639 (527)
CWE-400 (509)
CWE-269 (499)
CWE-119 (493)
CWE-770 (426)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (370)
CWE-190 (359)
CWE-362 (319)
CWE-352 (269)
CWE-285 (238)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-109618 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code e | KEV 710 PoC |
CVE-2026-109619 |
critical | 9.2 | 1.0000 | 2026-10-21 | PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote cod | KEV |
CVE-2026-112332 |
high | 8.7 | 0.0063 | 2026-10-22 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserial | |
CVE-2026-112330 |
high | 8.7 | 0.0068 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who | |
CVE-2026-112331 |
high | 8.7 | 0.0068 | 2026-10-22 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who | |
CVE-2026-48036 |
high | 8.4 | 0.0051 | 2026-07-24 | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure comp | |
CVE-2026-72753 |
high | 8.2 | 0.0040 | 2026-10-26 | When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still acc | |
CVE-2026-34065 |
high | 7.5 | 0.0037 | 2026-04-22 | nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust | |
CVE-2026-52856 |
high | 7.5 | 0.0061 | 2026-07-31 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. | |
CVE-2026-72754 |
high | 7.5 | 0.0040 | 2026-10-26 | When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator | |
CVE-2026-72756 |
high | 7.5 | 0.0040 | 2026-10-26 | Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stor | |
CVE-2026-72758 |
high | 7.5 | 0.0040 | 2026-10-26 | When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimu | |
CVE-2026-59162 |
medium | 6.9 | 0.0066 | 2026-07-10 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1 | |
CVE-2026-59952 |
medium | 6.9 | 0.0038 | 2026-07-30 | Valibot helps validate data using a schema. Versions prior to 1.4.2 can throw a TypeError inside its | |
CVE-2026-45819 |
medium | 6.6 | 0.0051 | 2026-08-13 | baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or co | |
CVE-2026-67080 |
medium | 6.5 | — | 2026-10-28 | HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of er | |
CVE-2026-72752 |
medium | 6.5 | 0.0024 | 2026-10-26 | Routinator runs out of memory when the JSON output is requested many times concurrently. This condit | |
CVE-2026-40074 |
medium | 6.3 | 0.0037 | 2026-04-10 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Pr | |
CVE-2026-42792 |
medium | 6.3 | 0.0043 | 2026-07-27 | Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauth | |
CVE-2026-49305 |
medium | 6.2 | 0.0011 | 2026-08-17 | Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of | |
CVE-2026-42545 |
medium | 5.9 | 0.0027 | 2026-05-12 | Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker | |
CVE-2026-59927 |
medium | 5.3 | 0.0053 | 2026-07-08 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directiv | |
CVE-2026-72757 |
medium | 5.3 | 0.0036 | 2026-10-26 | Routinator runs out of open connections on the HTTP server when many connections are opened but neve | |
CVE-2026-72755 |
low | 3.8 | 0.0018 | 2026-10-26 | Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentiall | |
CVE-2026-48524 |
low | 3.7 | 0.0040 | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() f | |
CVE-2026-23666 |
— | — | 0.0133 | 2026-04-14 | Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a n |