Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-69320 |
high | 8.8 | 0.0086 | 2026-08-11 | Improper neutralization of special elements used in an os command ('os command injection') in Visual | |
CVE-2023-31209 |
high | 8.8 | 0.0112 | 2023-08-10 | Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0 | |
CVE-2026-33613 |
high | 8.8 | 0.0050 | 2026-04-02 | Due to the improper neutralisation of special elements used in an OS command, a remote attacker can | |
CVE-2026-2701 |
high | 8.8 | 0.5454 | 2026-04-02 | Authenticated user can upload a malicious file to the server and execute it, which leads to remote c | |
CVE-2026-35517 |
high | 8.8 | 0.0086 | 2026-04-07 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web inte | |
CVE-2026-35518 |
high | 8.8 | 0.0070 | 2026-04-07 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web inte | |
CVE-2026-35519 |
high | 8.8 | 0.0054 | 2026-04-07 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web inte | |
CVE-2026-35520 |
high | 8.8 | 0.0070 | 2026-04-07 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web inte | |
CVE-2026-35521 |
high | 8.8 | 0.0069 | 2026-04-07 | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web inte | |
CVE-2026-32892 |
high | 8.8 | 0.0153 | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains a | |
CVE-2026-35582 |
high | 8.8 | 0.0086 | 2026-04-18 | Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getComm | |
CVE-2026-41208 |
high | 8.8 | 0.0059 | 2026-04-23 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. | |
CVE-2026-6849 |
high | 8.8 | 0.0101 | 2026-04-29 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerabi | |
CVE-2026-42994 |
high | 8.8 | 0.0031 | 2026-05-01 | Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embe | |
CVE-2026-42364 |
high | 8.8 | 0.0168 | 2026-05-04 | An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC20 | |
CVE-2026-7256 |
high | 8.8 | 0.0101 | 2026-05-12 | ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE650 | |
CVE-2026-41613 |
high | 8.8 | 0.0052 | 2026-05-12 | Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a | |
CVE-2026-44713 |
high | 8.8 | 0.0016 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, s | |
CVE-2026-9208 |
high | 8.8 | 0.0042 | 2026-05-27 | Tanium addressed an unauthorized code execution vulnerability in Connect. | |
CVE-2026-9863 |
high | 8.8 | 0.0060 | 2026-06-15 | Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch t | |
CVE-2026-12161 |
high | 8.8 | 0.0044 | 2026-06-16 | Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permis | |
CVE-2026-44932 |
high | 8.8 | 0.0036 | 2026-06-16 | Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 co | |
CVE-2026-55249 |
high | 8.8 | 0.0055 | 2026-06-23 | @rtk-ai/rtk-rewrite transparently rewrites shell commands executed via OpenClaw's exec tool to their | |
CVE-2026-48732 |
high | 8.8 | 0.0140 | 2026-06-24 | Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15. | |
CVE-2026-8659 |
high | 8.8 | 0.0129 | 2026-06-25 | OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authentica | |
CVE-2026-8663 |
high | 8.8 | 0.0129 | 2026-06-25 | OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated | |
CVE-2026-9787 |
high | 8.8 | 0.0549 | 2026-06-25 | Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vuln | |
CVE-2026-9155 |
high | 8.8 | 0.0160 | 2026-06-25 | OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated | |
CVE-2026-8664 |
high | 8.8 | 0.0129 | 2026-06-25 | OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authentica | |
CVE-2026-8658 |
high | 8.8 | 0.0129 | 2026-06-25 | OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authentic | |
CVE-2026-34594 |
high | 8.8 | 0.0138 | 2026-06-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34597 |
high | 8.8 | 0.0066 | 2026-06-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-27957 |
high | 8.8 | 0.0081 | 2026-06-30 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34153 |
high | 8.8 | 0.0078 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34599 |
high | 8.8 | 0.0280 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-42153 |
high | 8.8 | 0.0046 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-42204 |
high | 8.8 | 0.0046 | 2026-07-06 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34034 |
high | 8.8 | 0.0078 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34035 |
high | 8.8 | 0.0043 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34057 |
high | 8.8 | 0.0044 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34058 |
high | 8.8 | 0.0045 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34152 |
high | 8.8 | 0.0065 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34168 |
high | 8.8 | 0.0051 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-42143 |
high | 8.8 | 0.0053 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-34158 |
high | 8.8 | 0.0043 | 2026-07-07 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-59734 |
high | 8.8 | 0.0081 | 2026-07-09 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. | |
CVE-2026-54149 |
high | 8.8 | 0.0049 | 2026-07-10 | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import function | |
CVE-2026-62312 |
high | 8.8 | 0.0092 | 2026-07-15 | 9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated attacke | |
CVE-2026-14371 |
high | 8.8 | 0.0123 | 2026-07-16 | The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on th | |
CVE-2026-58195 |
high | 8.8 | 0.0056 | 2026-07-17 | Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools i |