Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-63299 |
critical | 9.9 | 0.0059 | 2026-08-12 | An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level di | |
CVE-2026-12818 |
critical | 9.3 | 0.0043 | 2026-06-30 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits | |
CVE-2026-48853 |
critical | 9.2 | 0.0078 | 2026-06-15 | Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabi | |
CVE-2026-59873 |
critical | 9.2 | 0.0058 | 2026-07-08 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enfor | |
CVE-2026-56324 |
high | 8.8 | 0.0033 | 2026-06-22 | Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channel_self endpoint that a | |
CVE-2026-63568 |
high | 8.7 | 0.0036 | 2026-10-02 | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PK | |
CVE-2026-112400 |
high | 8.7 | 0.0059 | 2026-10-19 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame | |
CVE-2026-116179 |
high | 8.7 | 0.0032 | 2026-10-25 | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients | |
CVE-2026-116877 |
high | 8.7 | 0.0033 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerabili | |
CVE-2026-116078 |
high | 8.7 | 0.0049 | 2026-10-28 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader | |
CVE-2026-118689 |
high | 8.7 | 0.0051 | 2026-10-28 | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() | |
CVE-2026-26061 |
high | 8.7 | 0.0045 | 2026-03-27 | Fleet is open source device management software. Prior to 4.81.0, Fleet contained multiple unauthent | |
CVE-2026-32145 |
high | 8.7 | 0.0062 | 2026-04-02 | Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denia | |
CVE-2026-3505 |
high | 8.7 | 0.0079 | 2026-04-15 | Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerabilit | |
CVE-2026-40192 |
high | 8.7 | 0.0067 | 2026-04-15 | Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP- | |
CVE-2026-35469 |
high | 8.7 | 0.0066 | 2026-04-16 | spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and bel | |
CVE-2026-39313 |
high | 8.7 | 0.0050 | 2026-04-16 | mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 a | |
CVE-2026-32688 |
high | 8.7 | 0.0054 | 2026-04-27 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows | |
CVE-2026-42786 |
high | 8.7 | 0.0065 | 2026-05-01 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthen | |
CVE-2026-32689 |
high | 8.7 | 0.0047 | 2026-05-05 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allow | |
CVE-2026-44499 |
high | 8.7 | 0.0035 | 2026-05-08 | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-servic | |
CVE-2026-22925 |
high | 8.7 | 0.0032 | 2026-05-12 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected applicati | |
CVE-2026-39803 |
high | 8.7 | 0.0064 | 2026-05-13 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthen | |
CVE-2026-40423 |
high | 8.7 | 0.0026 | 2026-05-13 | When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Mana | |
CVE-2026-40629 |
high | 8.7 | 0.0032 | 2026-05-13 | When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual serv | |
CVE-2026-41227 |
high | 8.7 | 0.0026 | 2026-05-13 | On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed traffic can result i | |
CVE-2026-48854 |
high | 8.7 | 0.0045 | 2026-06-15 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauth | |
CVE-2026-49851 |
high | 8.7 | 0.0052 | 2026-06-24 | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerabl | |
CVE-2026-58465 |
high | 8.7 | 0.0092 | 2026-07-02 | Eclipse Wakaama before snapshot/2026-05-26 contains an unbounded memory allocation vulnerability in | |
CVE-2026-56810 |
high | 8.7 | 0.0043 | 2026-07-06 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint (Mint.HTTP1 m | |
CVE-2026-56811 |
high | 8.7 | 0.0077 | 2026-07-07 | Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix (Phoe | |
CVE-2026-60108 |
high | 8.7 | 0.0079 | 2026-07-09 | Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that | |
CVE-2026-53653 |
high | 8.7 | 0.0052 | 2026-07-10 | Grav is a file-based Web platform. Prior to 1.7.53 and 2.0.0-rc.8, Grav allows an unauthenticated vi | |
CVE-2026-59161 |
high | 8.7 | 0.0066 | 2026-07-10 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.1 | |
CVE-2026-9140 |
high | 8.7 | 0.0043 | 2026-07-14 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper | |
CVE-2026-59204 |
high | 8.7 | 0.0039 | 2026-07-14 | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumul | |
CVE-2026-16756 |
high | 8.7 | 0.0075 | 2026-07-23 | Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the de | |
CVE-2026-55968 |
high | 8.7 | 0.0103 | 2026-07-27 | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerabili | |
CVE-2026-58389 |
high | 8.7 | 0.0103 | 2026-07-27 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. | |
CVE-2026-59251 |
high | 8.7 | 0.0032 | 2026-07-27 | Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a | |
CVE-2026-59248 |
high | 8.7 | 0.0029 | 2026-07-28 | Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated r | |
CVE-2026-69079 |
high | 8.7 | 0.0054 | 2026-08-03 | CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /ac | |
CVE-2026-68494 |
high | 8.7 | 0.0046 | 2026-08-04 | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number l | |
CVE-2026-67585 |
high | 8.7 | 0.0071 | 2026-08-07 | Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation | |
CVE-2026-73500 |
high | 8.7 | 0.0040 | 2026-08-12 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33 | |
CVE-2026-70455 |
high | 8.7 | 0.0057 | 2026-08-13 | rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to e | |
CVE-2026-70464 |
high | 8.7 | 0.0057 | 2026-08-13 | rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticat | |
CVE-2026-47683 |
high | 8.7 | 0.0054 | 2026-08-17 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in l | |
CVE-2026-114052 |
high | 8.7 | 0.0048 | 2026-10-21 | vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model s | |
CVE-2026-105270 |
high | 8.7 | 0.0034 | 2026-10-22 | Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml |