Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2613)
CWE-79 (1799)
CWE-416 (1282)
CWE-862 (1165)
CWE-89 (1090)
CWE-22 (1012)
CWE-125 (862)
CWE-200 (839)
CWE-306 (831)
CWE-122 (824)
CWE-20 (786)
CWE-78 (699)
CWE-918 (684)
CWE-787 (674)
CWE-94 (636)
CWE-863 (602)
CWE-74 (599)
CWE-639 (533)
CWE-400 (512)
CWE-269 (499)
CWE-119 (494)
CWE-502 (466)
CWE-770 (430)
CWE-287 (421)
CWE-121 (403)
CWE-77 (371)
CWE-190 (361)
CWE-362 (320)
CWE-352 (271)
CWE-285 (241)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-72889 |
critical | 9.8 | 0.0045 | 2026-08-19 | Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verif | |
CVE-2026-55953 |
critical | 9.1 | 0.0023 | 2026-07-27 | The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selec | |
CVE-2026-18691 |
critical | 9.0 | 0.0036 | 2026-08-11 | An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable networ | |
CVE-2026-53712 |
high | 8.2 | 0.0026 | 2026-07-17 | SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentic | |
CVE-2026-32650 |
high | 7.5 | 0.0021 | 2026-04-17 | Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable en | |
CVE-2026-4942 |
high | 7.5 | 0.0043 | 2026-07-17 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message an | |
CVE-2026-6550 |
medium | 5.7 | 0.0010 | 2026-04-20 | Cryptographic algorithm downgrade in the caching layer of Amazon AWS Encryption SDK for Python befor | |
CVE-2026-1677 |
medium | 5.3 | 0.0024 | 2026-05-11 | Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection when both TLS |