Dashboard / CWE

Vulnerability Weakness Types

Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.

CWE-284 (2634) CWE-79 (1848) CWE-416 (1298) CWE-862 (1184) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (711) CWE-918 (690) CWE-787 (686) CWE-863 (643) CWE-94 (642) CWE-74 (600) CWE-639 (543) CWE-400 (531) CWE-119 (503) CWE-269 (501) CWE-502 (471) CWE-770 (441) CWE-287 (432) CWE-121 (408) CWE-77 (373) CWE-190 (370) CWE-362 (323) CWE-352 (281) CWE-285 (243)

CWE-789

88 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-118590 medium 6.9 0.0042 2026-10-29 A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the
CVE-2026-54448 medium 6.9 0.0044 2026-06-25 Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its cust
CVE-2026-59938 medium 6.9 0.0052 2026-07-08 pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PD
CVE-2026-15337 medium 6.9 0.0059 2026-08-04 An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.utils.translation.
CVE-2026-112283 medium 6.8 0.0018 2026-10-19 VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_
CVE-2026-115394 medium 6.8 0.0016 2026-10-22 Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() t
CVE-2026-52753 medium 6.7 0.0015 2026-06-10 Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allo
CVE-2026-93849 medium 6.5 0.0046 2026-10-26 Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Matter
CVE-2026-55407 medium 6.3 0.0076 2026-07-16 Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Pri
CVE-2026-17535 medium 6.2 0.0016 2026-08-11 Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which
CVE-2026-115922 medium 6.2 0.0013 2026-10-26 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior
CVE-2026-35186 medium 6.1 0.0021 2026-04-09 Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's
CVE-2026-40182 medium 5.9 0.0030 2026-04-23 OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting t
CVE-2026-119276 medium 5.9 — 2026-10-29 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
CVE-2026-119278 medium 5.9 — 2026-10-29 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
CVE-2026-42146 medium 5.5 0.0018 2026-05-04 CImg Library is a C++ library for image processing. Prior to commit c3aacf5, the nb_colors field rea
CVE-2026-116095 medium 5.5 0.0052 2026-10-25 A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the f
CVE-2026-40891 medium 5.3 0.0019 2026-04-23 OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting t
CVE-2026-40894 medium 5.3 0.0046 2026-04-23 OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 an
CVE-2026-42241 medium 5.3 0.0027 2026-05-07 ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to
CVE-2026-44967 medium 5.3 0.0021 2026-06-12 OpenTelemetry-cpp is the C++ implementation of OpenTelemetry. Prior to release 1.27.0, the OTLP HTTP
CVE-2026-106114 medium 5.3 0.0033 2026-10-06 ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates al
CVE-2026-44253 medium 4.9 0.0061 2026-08-19 Wazuh is a free and open source platform used for threat prevention, detection, and response. From 3
CVE-2026-105613 medium 4.7 0.0018 2026-10-28 PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerabili
CVE-2026-105614 medium 4.7 0.0018 2026-10-28 PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the pro
CVE-2026-66485 medium 4.6 0.0019 2026-08-10 GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepat
CVE-2026-89092 medium 4.2 0.0024 2026-09-11 The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malici
CVE-2026-119280 low 3.7 — 2026-10-29 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
CVE-2026-55781 low 2.4 0.0016 2026-07-10 NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan
CVE-2026-55782 low 2.4 0.0018 2026-07-10 NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, Nan
CVE-2026-111108 — &mdash; 0.0027 2026-10-28 Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count
CVE-2026-111551 — &mdash; 0.0022 2026-10-28 Several Kafka deserialization paths read a size or count field from input data and use it directly t
CVE-2026-114349 — &mdash; 0.0023 2026-10-28 When a broker decodes a compressed record batch, the per-record decoder reads a declared body size f
CVE-2026-42440 — &mdash; 0.0060 2026-05-04 OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader  Version
CVE-2026-43868 — &mdash; 0.0071 2026-05-05 Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apac
CVE-2026-56387 — &mdash; 0.0027 2026-10-21 The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrust
CVE-2026-114629 — &mdash; 0.0027 2026-10-24 Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for
CVE-2026-115825 — &mdash; 0.0033 2026-10-25 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by dec