Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-6158 |
medium | 5.5 | 0.0155 | 2026-04-13 | A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUbo | |
CVE-2026-39417 |
medium | 5.5 | 0.0024 | 2026-04-14 | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete | |
CVE-2026-7061 |
medium | 5.5 | 0.0149 | 2026-04-26 | A weakness has been identified in Toowiredd chatgpt-mcp-server up to 0.1.0. Affected by this issue i | |
CVE-2026-7062 |
medium | 5.5 | 0.0150 | 2026-04-26 | A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unk | |
CVE-2026-7064 |
medium | 5.5 | 0.0238 | 2026-04-26 | A flaw has been found in AgentDeskAI browser-tools-mcp up to 1.2.0. This issue affects some unknown | |
CVE-2026-7066 |
medium | 5.5 | 0.0147 | 2026-04-27 | A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58 | |
CVE-2026-7416 |
medium | 5.5 | 0.0179 | 2026-04-29 | A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buil | |
CVE-2026-7443 |
medium | 5.5 | 0.0152 | 2026-04-29 | A weakness has been identified in BurtTheCoder mcp-dnstwist up to 1.0.4. Affected by this vulnerabil | |
CVE-2026-7446 |
medium | 5.5 | 0.0154 | 2026-04-30 | A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyz | |
CVE-2026-7590 |
medium | 5.5 | 0.0150 | 2026-05-01 | A vulnerability was identified in eyal-gor p_69_branch_monkey_mcp up to 69bc71874ce40050ef45fde5a435 | |
CVE-2026-7593 |
medium | 5.5 | 0.0150 | 2026-05-01 | A security vulnerability has been detected in Sunwood-ai-labs command-executor-mcp-server up to 0.1. | |
CVE-2026-7698 |
medium | 5.5 | 0.0272 | 2026-05-03 | A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by th | |
CVE-2026-65590 |
medium | 5.5 | 0.0058 | 2026-07-22 | n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and | |
CVE-2026-18641 |
medium | 5.5 | 0.0266 | 2026-08-03 | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to | |
CVE-2026-19379 |
medium | 5.5 | 0.0203 | 2026-08-10 | A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the | |
CVE-2026-58236 |
medium | 5.5 | 0.0069 | 2026-08-11 | SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to by | |
CVE-2026-15069 |
medium | 5.4 | 0.0030 | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary sc | |
CVE-2026-48122 |
medium | 5.4 | 0.0018 | 2026-08-07 | Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level sett | |
CVE-2026-15033 |
medium | 5.3 | 0.0182 | 2026-07-08 | A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vu | |
CVE-2026-15485 |
medium | 5.3 | 0.0177 | 2026-07-12 | A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C | |
CVE-2026-15486 |
medium | 5.3 | 0.0177 | 2026-07-12 | A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C | |
CVE-2026-15487 |
medium | 5.3 | 0.0177 | 2026-07-12 | A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of th | |
CVE-2026-47751 |
medium | 5.3 | 0.0077 | 2026-07-16 | Claude Code Action is a general-purpose GitHub action that runs Claude Code on GitHub pull requests | |
CVE-2026-116102 |
medium | 5.3 | 0.0091 | 2026-10-26 | A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the f | |
CVE-2026-116118 |
medium | 5.3 | 0.0105 | 2026-10-26 | A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unk | |
CVE-2026-116369 |
medium | 5.3 | 0.0139 | 2026-10-26 | A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is | |
CVE-2026-14852 |
medium | 5.2 | 0.0018 | 2026-07-14 | Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2 | |
CVE-2026-65611 |
medium | 5.1 | 0.0044 | 2026-08-19 | nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, | |
CVE-2026-65612 |
medium | 5.1 | 0.0044 | 2026-08-19 | nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a s | |
CVE-2026-8273 |
medium | 5.1 | 0.0739 | 2026-05-11 | A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi | |
CVE-2026-57282 |
medium | 5.0 | 0.0025 | 2026-06-24 | Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name w | |
CVE-2026-66297 |
medium | 5.0 | 0.0241 | 2026-08-05 | Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerabili | |
CVE-2026-11739 |
medium | 4.9 | 0.0255 | 2026-08-11 | A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-ad | |
CVE-2026-16629 |
medium | 4.8 | 0.0108 | 2026-07-22 | A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git | |
CVE-2026-116053 |
medium | 4.8 | 0.0069 | 2026-10-25 | A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the funct | |
CVE-2026-55798 |
medium | 4.5 | 0.0018 | 2026-07-06 | Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.e | |
CVE-2026-54686 |
medium | 4.3 | 0.0040 | 2026-06-24 | Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15. | |
CVE-2026-104308 |
medium | 4.3 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial | |
CVE-2026-42148 |
low | 3.8 | 0.0018 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34049 |
low | 3.3 | 0.0024 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34149 |
low | 3.3 | 0.0027 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-42201 |
low | 3.3 | 0.0024 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-6108 |
low | 2.1 | 0.0145 | 2026-04-12 | A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1. The affected element is the function exec | |
CVE-2026-6141 |
low | 2.1 | 0.0122 | 2026-04-13 | A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0. Affected is | |
CVE-2026-7600 |
low | 2.1 | 0.0122 | 2026-05-02 | A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/ | |
CVE-2026-7609 |
low | 2.1 | 0.0453 | 2026-05-02 | A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function too | |
CVE-2026-7642 |
low | 2.1 | 0.0147 | 2026-05-02 | A vulnerability was detected in pskill9 website-downloader up to 0.1.0. This affects the function do | |
CVE-2026-7653 |
low | 2.1 | 0.0142 | 2026-05-02 | A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the | |
CVE-2026-7730 |
low | 2.1 | 0.0120 | 2026-05-04 | A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function child_proc | |
CVE-2026-8112 |
low | 2.1 | 0.0323 | 2026-05-07 | A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affect |