Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2636)
CWE-79 (1862)
CWE-416 (1371)
CWE-862 (1193)
CWE-89 (1108)
CWE-22 (1029)
CWE-125 (919)
CWE-200 (851)
CWE-306 (840)
CWE-122 (832)
CWE-20 (801)
CWE-78 (717)
CWE-787 (714)
CWE-918 (695)
CWE-863 (649)
CWE-94 (642)
CWE-74 (601)
CWE-639 (551)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (472)
CWE-770 (447)
CWE-287 (434)
CWE-121 (409)
CWE-190 (377)
CWE-77 (375)
CWE-362 (373)
CWE-476 (299)
CWE-352 (284)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-106628 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-106631 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-84924 |
medium | 5.4 | 0.0023 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2026-59188 |
medium | 5.4 | 0.0015 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2025-52097 |
medium | 5.4 | 0.0030 | 2026-10-16 | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to | 1 PoC |
CVE-2026-110078 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110079 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-83960 |
medium | 5.4 | 0.0020 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110075 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110076 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110077 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-110073 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-110074 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-106632 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-106633 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-107682 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2026-109415 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-110037 |
medium | 5.4 | 0.0036 | 2026-10-13 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could | |
CVE-2026-110080 |
medium | 5.4 | 0.0019 | 2026-10-13 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An att | |
CVE-2024-58289 |
medium | 5.3 | 0.0026 | 2025-12-11 | Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated att | |
CVE-2024-58291 |
medium | 5.3 | 0.0037 | 2025-12-11 | Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated adminis | |
CVE-2024-58297 |
medium | 5.3 | 0.0026 | 2025-12-11 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configura | |
CVE-2024-58304 |
medium | 5.3 | 0.0031 | 2025-12-11 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product descri | |
CVE-2026-97165 |
medium | 5.3 | 0.0014 | 2026-09-27 | Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5. | |
CVE-2026-100753 |
medium | 5.3 | 0.0015 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7 | |
CVE-2026-101109 |
medium | 5.3 | 0.0015 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - | |
CVE-2026-113654 |
medium | 5.3 | 0.0043 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simp | |
CVE-2026-115350 |
medium | 5.3 | 0.0019 | 2026-10-22 | Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emi | |
CVE-2026-116583 |
medium | 5.3 | 0.0027 | 2026-10-26 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.strin | |
CVE-2026-116823 |
medium | 5.3 | 0.0018 | 2026-10-27 | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthentic | |
CVE-2026-116824 |
medium | 5.3 | 0.0018 | 2026-10-27 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers | |
CVE-2026-116874 |
medium | 5.3 | 0.0017 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability th | |
CVE-2026-116875 |
medium | 5.3 | 0.0017 | 2026-10-27 | SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in | |
CVE-2026-116881 |
medium | 5.3 | 0.0015 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows | |
CVE-2026-116884 |
medium | 5.3 | 0.0016 | 2026-10-27 | SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ex | |
CVE-2026-116885 |
medium | 5.3 | 0.0018 | 2026-10-27 | Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability i | |
CVE-2026-116886 |
medium | 5.3 | 0.0014 | 2026-10-27 | Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116887 |
medium | 5.3 | 0.0014 | 2026-10-27 | Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116889 |
medium | 5.3 | 0.0016 | 2026-10-27 | SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that | |
CVE-2026-116892 |
medium | 5.3 | 0.0021 | 2026-10-27 | SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability th | |
CVE-2026-29136 |
medium | 5.3 | 0.0010 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notificat | |
CVE-2026-35052 |
medium | 5.3 | 0.0062 | 2026-04-06 | D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data st | |
CVE-2026-35166 |
medium | 5.3 | 0.0019 | 2026-04-06 | Hugo is a static site generator. From 0.60.0 to before 0.159.2, links and image links in the default | |
CVE-2026-35608 |
medium | 5.3 | 0.0019 | 2026-04-07 | QuickDrop is an easy-to-use file sharing application. Prior to 1.5.3, a stored XSS vulnerability exi | |
CVE-2026-39941 |
medium | 5.3 | 0.0026 | 2026-04-09 | ChurchCRM is an open-source church management system. Prior to 7.1.0, an XSS vulnerability allows at | |
CVE-2026-6218 |
medium | 5.3 | 0.0028 | 2026-04-13 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the fun | |
CVE-2026-6559 |
medium | 5.3 | 0.0027 | 2026-04-19 | A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of | |
CVE-2026-6779 |
medium | 5.3 | 0.0021 | 2026-04-21 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150 and Thun | |
CVE-2026-41472 |
medium | 5.3 | 0.0052 | 2026-04-24 | CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Sca | |
CVE-2026-42554 |
medium | 5.3 | 0.0021 | 2026-05-11 | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in G |