Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1819)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (879)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (539)
CWE-400 (526)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-39455 |
high | 8.7 | 0.0030 | 2026-05-13 | When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LD | |
CVE-2026-13505 |
high | 8.7 | 0.0043 | 2026-08-08 | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) | |
CVE-2026-112200 |
high | 8.7 | — | 2026-10-29 | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RP | |
CVE-2026-115793 |
high | 8.7 | — | 2026-10-29 | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unkno | |
CVE-2026-118262 |
high | 8.2 | 0.0030 | 2026-10-28 | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a | |
CVE-2026-35227 |
high | 8.2 | 0.0035 | 2026-05-12 | An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus T | |
CVE-2026-20124 |
high | 7.7 | 0.0050 | 2026-08-05 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software | |
CVE-2026-13351 |
high | 7.5 | 0.0049 | 2026-06-25 | Zephyr's IPv6 network stack can be prevented from receiving or processing future incoming packets by | |
CVE-2026-36590 |
high | 7.5 | 0.0059 | 2026-07-15 | An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qo | |
CVE-2026-61387 |
medium | 6.9 | 0.0062 | 2026-08-04 | In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: | |
CVE-2026-56444 |
medium | 5.9 | 0.0037 | 2026-07-22 | In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expi | |
CVE-2026-49343 |
medium | 5.9 | 0.0041 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, t | |
CVE-2026-104031 |
medium | 5.5 | 0.0010 | 2026-10-06 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory al | |
CVE-2026-40209 |
medium | 5.3 | 0.0070 | 2026-06-25 | An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout o | |
CVE-2026-64607 |
medium | 5.3 | 0.0046 | 2026-07-31 | HttpClient based on the classic i/o model fails to correctly release the underlying connection back | |
CVE-2026-90870 |
medium | 5.3 | — | 2026-10-29 | A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software | |
CVE-2026-81039 |
medium | 4.3 | 0.0021 | 2026-10-26 | The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool | |
CVE-2026-41637 |
low | 3.7 | 0.0037 | 2026-07-22 | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queri | |
CVE-2026-11811 |
low | 3.7 | 0.0040 | 2026-08-10 | The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c | |
CVE-2026-114236 |
low | 3.3 | 0.0010 | 2026-10-21 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious | |
CVE-2026-54786 |
low | 2.3 | 0.0037 | 2026-07-01 | Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those | |
CVE-2024-20481 |
— | — | 0.1587 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release | KEV |