Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-115775 |
high | 8.7 | 0.0044 | 2026-10-23 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1 | |
CVE-2026-108525 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of m | |
CVE-2026-110499 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of m | |
CVE-2026-111101 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body read | |
CVE-2026-114213 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassem | |
CVE-2026-115269 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader | |
CVE-2026-119119 |
high | 8.7 | — | 2026-10-29 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _cla | |
CVE-2026-54609 |
high | 8.6 | 0.0046 | 2026-07-28 | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0 | |
CVE-2024-10085 |
high | 8.2 | 0.0043 | 2026-09-01 | CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause | |
CVE-2026-111064 |
high | 8.2 | 0.0040 | 2026-10-19 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, kee | |
CVE-2026-118374 |
high | 8.2 | 0.0021 | 2026-10-28 | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OC | |
CVE-2026-118260 |
high | 8.2 | 0.0037 | 2026-10-28 | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads comp | |
CVE-2026-40073 |
high | 8.2 | 0.0054 | 2026-04-10 | SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Pr | |
CVE-2026-39804 |
high | 8.2 | 0.0076 | 2026-05-01 | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthen | |
CVE-2026-8466 |
high | 8.2 | 0.0038 | 2026-05-13 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial | |
CVE-2026-8468 |
high | 8.2 | 0.0062 | 2026-05-14 | Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denia | |
CVE-2026-11972 |
high | 8.2 | 0.0072 | 2026-06-23 | When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile modul | |
CVE-2026-53426 |
high | 8.2 | 0.0018 | 2026-06-29 | Allocation of Resources Without Limits or Throttling vulnerability in leandrocp MDEx allows Excessiv | |
CVE-2026-55575 |
high | 8.2 | 0.0049 | 2026-07-08 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.1 | |
CVE-2026-86696 |
high | 8.2 | 0.0044 | 2026-10-22 | Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows | |
CVE-2026-94482 |
high | 8.2 | 0.0037 | 2026-10-22 | Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and | |
CVE-2026-114644 |
high | 8.2 | 0.0048 | 2026-10-22 | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its d | |
CVE-2026-97200 |
high | 8.2 | 0.0056 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackne | |
CVE-2026-119051 |
high | 8.2 | — | 2026-10-29 | flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that al | |
CVE-2026-56170 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-47302 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny | |
CVE-2026-50525 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny | |
CVE-2026-50648 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attack | |
CVE-2026-50651 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny | |
CVE-2026-73197 |
high | 7.5 | 0.0054 | 2026-08-20 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by se | |
CVE-2026-73198 |
high | 7.5 | 0.0054 | 2026-08-20 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the ` | |
CVE-2026-70133 |
high | 7.5 | 0.0127 | 2026-10-13 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at | |
CVE-2026-70163 |
high | 7.5 | 0.0123 | 2026-10-13 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized a | |
CVE-2026-113729 |
high | 7.5 | 0.0046 | 2026-10-20 | Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCa | |
CVE-2026-116587 |
high | 7.5 | 0.0037 | 2026-10-26 | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards | |
CVE-2026-118036 |
high | 7.5 | 0.0037 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-45646 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-49787 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized atta | |
CVE-2026-49788 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de | |
CVE-2026-50506 |
high | 7.5 | 0.0117 | 2026-07-14 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-54113 |
high | 7.5 | 0.0117 | 2026-08-11 | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attack | |
CVE-2026-96959 |
high | 7.5 | 0.0097 | 2026-10-13 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny | |
CVE-2026-109468 |
high | 7.5 | 0.0095 | 2026-10-15 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-70159 |
high | 7.5 | 0.0123 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-70181 |
high | 7.5 | 0.0123 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2026-83645 |
high | 7.5 | 0.0125 | 2026-10-13 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) | |
CVE-2026-85319 |
high | 7.5 | 0.0110 | 2026-10-13 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) | |
CVE-2026-85321 |
high | 7.5 | 0.0106 | 2026-10-13 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) | |
CVE-2026-96236 |
high | 7.5 | 0.0109 | 2026-10-13 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker | |
CVE-2023-27530 |
high | 7.5 | 0.0183 | 2023-03-10 | A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multi |