Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1297)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (543)
CWE-400 (530)
CWE-119 (503)
CWE-269 (501)
CWE-502 (470)
CWE-770 (440)
CWE-287 (432)
CWE-121 (407)
CWE-77 (373)
CWE-190 (368)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-108357 |
high | 8.8 | 0.0036 | 2026-10-22 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. From 3.3.0 until 3.1 | |
CVE-2026-108358 |
high | 8.8 | 0.0048 | 2026-10-22 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1 | |
CVE-2026-3415 |
high | 8.7 | 0.0049 | 2026-08-06 | The XML and schema validation functionalities within the SchemaValidator Mediator process XML input | |
CVE-2026-73569 |
high | 8.7 | 0.0051 | 2026-08-13 | fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callback | |
CVE-2026-115506 |
high | 8.7 | 0.0046 | 2026-10-22 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection | |
CVE-2026-14979 |
high | 7.5 | 0.0055 | 2026-07-17 | IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Inte | |
CVE-2026-108086 |
high | 7.5 | 0.0022 | 2026-10-20 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML en | |
CVE-2026-42212 |
high | 7.1 | 0.0040 | 2026-05-08 | SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCA | |
CVE-2026-44018 |
high | 7.1 | 0.0016 | 2026-06-26 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-12993 |
medium | 6.5 | 0.0052 | 2026-06-26 | A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and | |
CVE-2026-23822 |
medium | 5.3 | 0.0026 | 2026-05-12 | A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated | |
CVE-2026-14865 |
medium | 5.3 | 0.0043 | 2026-07-22 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes | |
CVE-2026-26171 |
— | — | 0.0175 | 2026-04-14 | Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a net | |
CVE-2026-44020 |
— | — | 0.0060 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th |