Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1298)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (686)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-3519 |
high | 7.2 | 0.0213 | 2026-04-20 | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an a | |
CVE-2026-4048 |
high | 7.2 | 0.0213 | 2026-04-20 | OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an au | |
CVE-2026-23823 |
high | 7.2 | 0.0096 | 2026-05-12 | A vulnerability in the command line interface of Access Points running AOS-10 could allow an authent | |
CVE-2026-44853 |
high | 7.2 | 0.0101 | 2026-05-12 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op | |
CVE-2026-44854 |
high | 7.2 | 0.0101 | 2026-05-12 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op | |
CVE-2026-44865 |
high | 7.2 | 0.0092 | 2026-05-12 | Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Op | |
CVE-2026-44872 |
high | 7.2 | 0.0081 | 2026-05-12 | A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 O | |
CVE-2026-44879 |
high | 7.2 | 0.0145 | 2026-07-21 | A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authe | |
CVE-2026-38710 |
high | 7.2 | 0.0233 | 2026-07-31 | TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in th | |
CVE-2026-79956 |
high | 7.2 | 0.0070 | 2026-10-22 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated | |
CVE-2026-95705 |
high | 7.2 | 0.0115 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated re | |
CVE-2026-95706 |
high | 7.2 | 0.0115 | 2026-10-22 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated re | |
CVE-2026-95708 |
high | 7.2 | 0.0126 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an auth | |
CVE-2026-95709 |
high | 7.2 | 0.0126 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an auth | |
CVE-2026-84387 |
high | 7.2 | 0.0140 | 2026-09-08 | An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability | |
CVE-2026-7039 |
high | 7.1 | 0.0065 | 2026-04-26 | A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is | |
CVE-2026-4786 |
high | 7.0 | 0.0029 | 2026-04-13 | Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be by | |
CVE-2026-5663 |
medium | 6.9 | 0.0189 | 2026-04-06 | A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnR | |
CVE-2026-5974 |
medium | 6.9 | 0.0246 | 2026-04-09 | A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the | |
CVE-2026-19263 |
medium | 6.9 | 0.0164 | 2026-08-08 | A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e0611 | |
CVE-2026-53533 |
medium | 6.9 | 0.0053 | 2026-08-18 | aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rc | |
CVE-2026-18587 |
medium | 6.8 | 0.0198 | 2026-08-03 | A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown funct | |
CVE-2026-95715 |
medium | 6.8 | 0.0159 | 2026-10-22 | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. S | |
CVE-2026-23779 |
medium | 6.7 | 0.0052 | 2026-04-17 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions | |
CVE-2026-21709 |
medium | 6.7 | 0.0017 | 2026-04-17 | A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Sig | |
CVE-2026-47285 |
medium | 6.5 | 0.0092 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio | |
CVE-2025-45493 |
medium | 6.5 | 0.0090 | 2025-12-23 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_b | |
CVE-2026-20095 |
medium | 6.5 | 0.0095 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem | |
CVE-2026-20096 |
medium | 6.5 | 0.0073 | 2026-04-01 | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem | |
CVE-2026-23653 |
medium | 6.5 | 0.0074 | 2026-04-14 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilo | |
CVE-2026-40135 |
medium | 6.5 | 0.0140 | 2026-05-12 | An OS Command Injection vulnerability exists in the SAP NetWeaver Application Server for ABAP and AB | |
CVE-2026-20169 |
medium | 6.4 | 0.0021 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allo | |
CVE-2024-30167 |
medium | 6.3 | 0.0114 | 2026-05-08 | /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to ex | |
CVE-2026-55145 |
medium | 6.3 | 0.0053 | 2026-07-14 | Improper neutralization of special elements used in a command ('command injection') in Outlook Copil | |
CVE-2026-55946 |
medium | 6.1 | 0.0039 | 2026-09-17 | Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information ov | |
CVE-2026-47240 |
medium | 5.8 | 0.0083 | 2026-06-22 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to | |
CVE-2026-47242 |
medium | 5.8 | 0.0018 | 2026-06-22 | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to | |
CVE-2026-117511 |
medium | 5.5 | 0.0163 | 2026-10-27 | A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue i | |
CVE-2026-5333 |
medium | 5.5 | 0.0293 | 2026-04-02 | A security flaw has been discovered in DefaultFuction Content-Management-System 1.0. This issue affe | |
CVE-2026-5972 |
medium | 5.5 | 0.0256 | 2026-04-09 | A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the funct | |
CVE-2026-5973 |
medium | 5.5 | 0.0251 | 2026-04-09 | A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime | |
CVE-2026-6130 |
medium | 5.5 | 0.0150 | 2026-04-12 | A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransp | |
CVE-2026-6158 |
medium | 5.5 | 0.0155 | 2026-04-13 | A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUbo | |
CVE-2026-6980 |
medium | 5.5 | 0.0278 | 2026-04-25 | A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b2513 | |
CVE-2026-7058 |
medium | 5.5 | 0.0147 | 2026-04-26 | A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the function | |
CVE-2026-7061 |
medium | 5.5 | 0.0149 | 2026-04-26 | A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue i | |
CVE-2026-7062 |
medium | 5.5 | 0.0150 | 2026-04-26 | A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unk | |
CVE-2026-7064 |
medium | 5.5 | 0.0238 | 2026-04-26 | A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects some unknown | |
CVE-2026-7066 |
medium | 5.5 | 0.0147 | 2026-04-27 | A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58 | |
CVE-2026-7067 |
medium | 5.5 | 0.0272 | 2026-04-27 | A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system |