Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-11341 |
low | 2.1 | 0.0104 | 2026-06-05 | A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412D | |
CVE-2026-12814 |
low | 2.1 | 0.0238 | 2026-06-21 | A flaw has been found in Comfast CF-WR631AX V3 up to 2.7.0.8. This issue affects the function system | |
CVE-2026-12815 |
low | 2.1 | 0.0170 | 2026-06-22 | A vulnerability has been found in coollabsio coolify 4.0.0. Impacted is an unknown function of the c | |
CVE-2026-13560 |
low | 2.1 | 0.0199 | 2026-06-29 | A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the fu | |
CVE-2026-13561 |
low | 2.1 | 0.0199 | 2026-06-29 | A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNI | |
CVE-2026-13581 |
low | 2.1 | 0.0199 | 2026-06-29 | A vulnerability was detected in Edimax EW-7478APC 1.04. This vulnerability affects the function form | |
CVE-2026-15495 |
low | 2.1 | 0.0189 | 2026-07-12 | A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an | |
CVE-2026-15496 |
low | 2.1 | 0.0199 | 2026-07-12 | A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the func | |
CVE-2026-15513 |
low | 2.1 | 0.0182 | 2026-07-13 | A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function wlink_uc | |
CVE-2026-15546 |
low | 2.1 | 0.0177 | 2026-07-13 | A security flaw has been discovered in Shibby Tomato up to 1.28.0000. Affected by this issue is the | |
CVE-2026-15547 |
low | 2.1 | 0.0177 | 2026-07-13 | A weakness has been identified in Shibby Tomato up to 1.28.0000. This affects the function sub_2D048 | |
CVE-2026-18590 |
low | 2.1 | 0.0182 | 2026-08-03 | A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function set_sy | |
CVE-2026-19243 |
low | 2.1 | 0.0226 | 2026-08-07 | A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function Ex | |
CVE-2026-116109 |
low | 2.1 | 0.0115 | 2026-10-26 | A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the functio | |
CVE-2026-7608 |
low | 2.0 | 0.0570 | 2026-05-02 | A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the funct | |
CVE-2026-8271 |
low | 2.0 | 0.0510 | 2026-05-11 | A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_s | |
CVE-2026-8272 |
low | 2.0 | 0.0614 | 2026-05-11 | A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rena | |
CVE-2026-16492 |
low | 2.0 | 0.0391 | 2026-07-22 | A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.g | |
CVE-2026-15035 |
low | 1.9 | 0.0222 | 2026-07-08 | A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of | |
CVE-2026-15193 |
low | 1.9 | 0.0108 | 2026-07-09 | A vulnerability was determined in AidanPark openclaw-android up to 0.4.0. The affected element is an | |
CVE-2026-15669 |
low | 1.9 | 0.0108 | 2026-07-14 | A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function ExecTool. | |
CVE-2026-16630 |
low | 1.9 | 0.0108 | 2026-07-22 | A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. Th | |
CVE-2026-16733 |
low | 1.9 | 0.0106 | 2026-07-23 | A weakness has been identified in bahmutov find-cypress-specs up to 1.54.12. The impacted element is | |
CVE-2026-16735 |
low | 1.9 | 0.0108 | 2026-07-23 | A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This a | |
CVE-2026-16763 |
low | 1.9 | 0.0122 | 2026-07-23 | A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element | |
CVE-2026-16488 |
low | 1.3 | 0.0149 | 2026-07-22 | A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the fu | |
CVE-2017-6884 |
— | — | 0.3298 | — | Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, spe | KEV |
CVE-2018-11138 |
— | — | 0.9172 | — | The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is a | KEV |
CVE-2019-15107 |
— | — | 0.9971 | — | An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injec | KEV |
CVE-2020-9054 |
— | — | 0.9999 | — | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection | KEV |
CVE-2018-19949 |
— | — | 0.3016 | — | A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to ru | KEV |
CVE-2021-25297 |
— | — | 0.5666 | — | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. | KEV |
CVE-2021-25298 |
— | — | 0.7364 | — | Nagios XI contains a vulnerability which can lead to OS command injection on the Nagios XI server. | KEV |
CVE-2022-26258 |
— | — | 0.9163 | — | D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which all | KEV |
CVE-2024-1212 |
— | — | 0.9539 | — | Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticat | KEV |
CVE-2024-51378 |
— | — | 0.9475 | — | CyberPanel contains an incorrect default permissions vulnerability that allows for authentication by | KEV |
CVE-2024-9474 |
— | — | 0.9375 | — | Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege e | KEV |
CVE-2025-9377 |
— | — | 0.4130 | — | TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists | KEV |
CVE-2025-58034 |
— | — | 0.5472 | — | Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated att | KEV |
CVE-2025-67038 |
— | — | 0.2029 | — | Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbit | KEV |
CVE-2026-34982 |
— | — | 0.0044 | 2026-04-06 | Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypas | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-04-07 | Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. | KEV |
CVE-2026-4631 |
— | — | 0.1548 | 2026-04-07 | Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface t | |
CVE-2026-28291 |
— | — | 0.0077 | 2026-04-13 | simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 | |
CVE-2026-7246 |
— | — | 0.0090 | 2026-04-30 | This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability | |
CVE-2026-4802 |
— | — | 0.0102 | 2026-05-11 | A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary comman | |
CVE-2026-44724 |
— | — | 0.0092 | 2026-05-27 | systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linu | |
CVE-2026-10520 |
— | — | 0.9991 | — | Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability w | KEV |
CVE-2026-25089 |
— | — | 0.7611 | — | Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vul | KEV |
CVE-2026-44168 |
— | — | 0.0059 | 2026-06-12 | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26 |