Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-14454 |
critical | 9.8 | 0.0066 | 2026-07-08 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishan | |
CVE-2026-63566 |
high | 8.7 | 0.0043 | 2026-10-02 | Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, | |
CVE-2026-103603 |
high | 8.7 | 0.0052 | 2026-10-02 | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, H | |
CVE-2026-63574 |
high | 8.7 | 0.0043 | 2026-10-02 | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket pa | |
CVE-2026-112399 |
high | 8.7 | 0.0053 | 2026-10-19 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal ba | |
CVE-2026-59204 |
high | 8.7 | 0.0039 | 2026-07-14 | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumul | |
CVE-2026-65315 |
high | 8.7 | 0.0081 | 2026-07-21 | Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata | |
CVE-2026-55768 |
high | 8.7 | 0.0047 | 2026-07-30 | GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix syst | |
CVE-2026-12852 |
high | 8.7 | 0.0049 | 2026-08-03 | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length be | |
CVE-2026-58067 |
high | 8.7 | 0.0045 | 2026-08-04 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust ho | |
CVE-2026-66733 |
high | 8.7 | 0.0155 | 2026-08-06 | Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in Receiv | |
CVE-2026-69219 |
high | 8.7 | 0.0073 | 2026-08-18 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w | |
CVE-2026-75935 |
high | 8.7 | 0.0061 | 2026-08-18 | Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 migh | |
CVE-2026-108359 |
high | 8.7 | 0.0041 | 2026-10-22 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1 | |
CVE-2026-42946 |
high | 8.3 | 0.0093 | 2026-05-13 | A vulnerability exists in the ngx_http_scgi_module and ngx_http_uwsgi_module modules that may result | |
CVE-2026-54890 |
high | 8.2 | 0.0042 | 2026-07-27 | Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang | |
CVE-2026-115417 |
high | 7.5 | 0.0035 | 2026-10-22 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqt | |
CVE-2026-104895 |
high | 7.5 | 0.0038 | 2026-10-28 | The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken fro | |
CVE-2026-118036 |
high | 7.5 | 0.0037 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-40378 |
high | 7.5 | 0.0117 | 2026-07-14 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (L | |
CVE-2026-85324 |
high | 7.5 | 0.0075 | 2026-10-13 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows a | |
CVE-2026-24146 |
high | 7.5 | 0.0053 | 2026-04-07 | NVIDIA Triton Inference Server contains a vulnerability where insufficient input validation and a la | |
CVE-2026-40303 |
high | 7.5 | 0.0045 | 2026-04-17 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, end | |
CVE-2026-33524 |
high | 7.5 | 0.0032 | 2026-04-24 | Zserio is a framework for serializing structured data with a compact and efficient way with low over | |
CVE-2026-42189 |
high | 7.5 | 0.0048 | 2026-05-08 | Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-authentication denial-of | |
CVE-2026-42348 |
high | 7.5 | 0.0031 | 2026-05-12 | OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when | |
CVE-2026-42582 |
high | 7.5 | 0.0044 | 2026-05-13 | Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when de | |
CVE-2026-44375 |
high | 7.5 | 0.0035 | 2026-05-14 | Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, N | |
CVE-2026-33592 |
high | 7.5 | 0.0052 | 2026-07-02 | An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service i | |
CVE-2026-11946 |
high | 7.5 | 0.0052 | 2026-07-02 | An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service | |
CVE-2026-54059 |
high | 7.5 | 0.0041 | 2026-07-06 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph d | |
CVE-2026-54060 |
high | 7.5 | 0.0042 | 2026-07-06 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled pe | |
CVE-2026-55379 |
high | 7.5 | 0.0052 | 2026-07-06 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX widt | |
CVE-2026-55380 |
high | 7.5 | 0.0052 | 2026-07-06 | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read ima | |
CVE-2026-15053 |
high | 7.5 | 0.0046 | 2026-07-08 | Tanium addressed a denial of service vulnerability in Tanium Server. | |
CVE-2026-40006 |
high | 7.5 | 0.0058 | 2026-07-10 | Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, M | |
CVE-2026-47667 |
high | 7.5 | 0.0052 | 2026-07-21 | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_load_analyze()`, the | |
CVE-2026-54638 |
high | 7.5 | 0.0063 | 2026-07-28 | gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode | |
CVE-2026-66273 |
high | 7.5 | 0.0077 | 2026-08-05 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation | |
CVE-2026-67551 |
high | 7.5 | 0.0077 | 2026-08-05 | pre-authentication attacker could leverage type size/count handling to cause excessive allocation le | |
CVE-2026-67589 |
high | 7.5 | 0.0077 | 2026-08-05 | A pre-authentication attacker could leverage type size/count handling to cause excessive allocation | |
CVE-2026-70377 |
high | 7.5 | 0.0039 | 2026-08-05 | imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (di | |
CVE-2026-44630 |
high | 7.5 | 0.0059 | 2026-08-10 | Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthentica | |
CVE-2026-15567 |
high | 7.5 | 0.0101 | 2026-08-11 | A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2 | |
CVE-2026-19566 |
high | 7.5 | 0.0063 | 2026-08-12 | Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via un | |
CVE-2026-115907 |
high | 7.5 | 0.0035 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9 | |
CVE-2026-115909 |
high | 7.5 | 0.0046 | 2026-10-26 | zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9 | |
CVE-2026-69702 |
high | 7.1 | 0.0055 | 2026-08-04 | SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that al | |
CVE-2025-71395 |
high | 7.1 | 0.0045 | 2026-07-18 | SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace fun | |
CVE-2026-118589 |
medium | 6.9 | 0.0040 | 2026-10-29 | A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the |