Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-50523 |
high | 7.8 | 0.0032 | 2026-08-14 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow | |
CVE-2026-58635 |
high | 7.8 | 0.0032 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Windows Narra | 1 PoC |
CVE-2026-65656 |
high | 7.8 | 0.0046 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Off | |
CVE-2026-68792 |
high | 7.8 | 0.0032 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Off | |
CVE-2026-69718 |
high | 7.8 | 0.0044 | 2026-10-13 | Improper neutralization of special elements used in a command ('command injection') in Windows Updat | |
CVE-2026-32183 |
high | 7.8 | 0.0062 | 2026-04-14 | Improper neutralization of special elements used in a command ('command injection') in Windows Snipp | |
CVE-2026-46709 |
high | 7.8 | 0.0025 | 2026-07-15 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.234, Tabby insert | |
CVE-2024-56836 |
high | 7.7 | 0.0043 | 2025-12-09 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX | |
CVE-2026-33111 |
high | 7.5 | 0.0114 | 2026-05-07 | Improper neutralization of special elements used in a command ('command injection') in Copilot Chat | |
CVE-2026-42893 |
high | 7.5 | 0.0040 | 2026-05-12 | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot | |
CVE-2026-42895 |
high | 7.5 | 0.0071 | 2026-06-19 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Cop | |
CVE-2026-47690 |
high | 7.5 | 0.0052 | 2026-07-21 | MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions o | |
CVE-2026-39866 |
high | 7.4 | 0.0235 | 2026-04-21 | Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a392144525284 | |
CVE-2026-7096 |
high | 7.4 | 0.0408 | 2026-04-27 | A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the funct | |
CVE-2026-7119 |
high | 7.4 | 0.0327 | 2026-04-27 | A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the fi | |
CVE-2026-7160 |
high | 7.4 | 0.0327 | 2026-04-27 | A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert | |
CVE-2026-7548 |
high | 7.4 | 0.0149 | 2026-05-01 | A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910. This affects the function su | |
CVE-2026-42850 |
high | 7.4 | 0.0029 | 2026-06-12 | Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject | |
CVE-2026-13545 |
high | 7.4 | 0.0554 | 2026-06-29 | A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of t | |
CVE-2026-15481 |
high | 7.4 | 0.0289 | 2026-07-12 | A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects | |
CVE-2026-18598 |
high | 7.4 | 0.0321 | 2026-08-03 | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function | |
CVE-2026-18600 |
high | 7.4 | 0.0321 | 2026-08-03 | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.s | |
CVE-2026-18787 |
high | 7.4 | 0.0321 | 2026-08-04 | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function r | |
CVE-2026-19346 |
high | 7.4 | 0.0273 | 2026-08-09 | A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCe | |
CVE-2024-45257 |
high | 7.3 | 0.0389 | 2026-05-08 | A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attac | |
CVE-2026-5844 |
high | 7.3 | 0.0508 | 2026-04-09 | A vulnerability was found in D-Link DIR-882 1.01B02. Impacted is the function sprintf of the file pr | |
CVE-2026-6483 |
high | 7.3 | 0.1337 | 2026-04-17 | A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function st | |
CVE-2026-6992 |
high | 7.3 | 0.0815 | 2026-04-25 | A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGe | |
CVE-2026-7833 |
high | 7.3 | 0.0316 | 2026-05-05 | A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the functi | |
CVE-2026-18599 |
high | 7.3 | 0.0444 | 2026-08-03 | A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread | |
CVE-2026-18811 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the f | |
CVE-2026-18812 |
high | 7.3 | 0.0358 | 2026-08-04 | A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of th | |
CVE-2026-18813 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /a | |
CVE-2026-18814 |
high | 7.3 | 0.0358 | 2026-08-04 | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of th | |
CVE-2026-18900 |
high | 7.3 | 0.0382 | 2026-08-05 | A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file | |
CVE-2026-18902 |
high | 7.3 | 0.0382 | 2026-08-05 | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function es | |
CVE-2026-19034 |
high | 7.3 | 0.0318 | 2026-08-06 | A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the fun | |
CVE-2026-19035 |
high | 7.3 | 0.0318 | 2026-08-06 | A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function ne | |
CVE-2026-19036 |
high | 7.3 | 0.0318 | 2026-08-06 | A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C | |
CVE-2026-72913 |
high | 7.3 | 0.0021 | 2026-08-10 | Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS ha | |
CVE-2026-47299 |
high | 7.2 | 0.0101 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Azure Monitor | |
CVE-2023-36750 |
high | 7.2 | 0.0154 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2023-36751 |
high | 7.2 | 0.0154 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2023-36752 |
high | 7.2 | 0.0154 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2023-36753 |
high | 7.2 | 0.0154 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2023-36754 |
high | 7.2 | 0.0154 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2023-36755 |
high | 7.2 | 0.0097 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX | |
CVE-2026-23778 |
high | 7.2 | 0.0114 | 2026-04-17 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions | |
CVE-2026-3517 |
high | 7.2 | 0.1549 | 2026-04-20 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an a | |
CVE-2026-3518 |
high | 7.2 | 0.1688 | 2026-04-20 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an a |