Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-5647 |
low | 1.9 | 0.0021 | 2026-04-06 | A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of | |
CVE-2026-5668 |
low | 1.9 | 0.0021 | 2026-04-06 | A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4 | |
CVE-2026-6003 |
low | 1.9 | 0.0020 | 2026-04-10 | A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This iss | |
CVE-2026-6184 |
low | 1.9 | 0.0030 | 2026-04-13 | A weakness has been identified in code-projects Simple Content Management System 1.0. This affects a | |
CVE-2026-6622 |
low | 1.9 | 0.0021 | 2026-04-20 | A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknow | |
CVE-2026-6624 |
low | 1.9 | 0.0021 | 2026-04-20 | A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown | |
CVE-2026-6651 |
low | 1.9 | 0.0021 | 2026-04-20 | A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affe | |
CVE-2026-6995 |
low | 1.9 | 0.0024 | 2026-04-25 | A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element | |
CVE-2026-6996 |
low | 1.9 | 0.0024 | 2026-04-25 | A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown fu | |
CVE-2026-6997 |
low | 1.9 | 0.0024 | 2026-04-25 | A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts a | |
CVE-2026-6998 |
low | 1.9 | 0.0024 | 2026-04-25 | A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown funct | |
CVE-2026-6999 |
low | 1.9 | 0.0027 | 2026-04-25 | A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown funct | |
CVE-2026-7000 |
low | 1.9 | 0.0024 | 2026-04-25 | A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some un | |
CVE-2026-7001 |
low | 1.9 | 0.0024 | 2026-04-25 | A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the co | |
CVE-2026-7011 |
low | 1.9 | 0.0027 | 2026-04-26 | A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unkn | |
CVE-2026-7012 |
low | 1.9 | 0.0029 | 2026-04-26 | A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the compone | |
CVE-2026-7013 |
low | 1.9 | 0.0022 | 2026-04-26 | A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is som | |
CVE-2026-7014 |
low | 1.9 | 0.0027 | 2026-04-26 | A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the com | |
CVE-2026-7015 |
low | 1.9 | 0.0022 | 2026-04-26 | A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processin | |
CVE-2026-7016 |
low | 1.9 | 0.0022 | 2026-04-26 | A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the compone | |
CVE-2026-7027 |
low | 1.9 | 0.0043 | 2026-04-26 | A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the | |
CVE-2026-7090 |
low | 1.9 | 0.0025 | 2026-04-27 | A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of t | |
CVE-2026-7269 |
low | 1.9 | 0.0021 | 2026-04-28 | A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an | |
CVE-2026-7281 |
low | 1.9 | 0.0021 | 2026-04-28 | A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impact | |
CVE-2026-7294 |
low | 1.9 | 0.0021 | 2026-04-28 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability | |
CVE-2026-8136 |
low | 1.9 | 0.0020 | 2026-05-08 | A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unk | |
CVE-2026-11338 |
low | 1.9 | 0.0026 | 2026-06-05 | A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1. | |
CVE-2026-14655 |
low | 1.9 | 0.0037 | 2026-07-04 | A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is | |
CVE-2026-15532 |
low | 1.9 | 0.0037 | 2026-07-13 | A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects so | |
CVE-2026-16205 |
low | 1.9 | 0.0035 | 2026-07-19 | A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function ht | |
CVE-2026-19207 |
low | 1.9 | 0.0037 | 2026-08-07 | A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This | |
CVE-2026-112038 |
low | 1.9 | 0.0021 | 2026-10-19 | A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. | |
CVE-2026-116100 |
low | 1.9 | 0.0020 | 2026-10-26 | A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file a | |
CVE-2026-41430 |
low | 1.3 | 0.0015 | 2026-04-24 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace | |
CVE-2026-13140 |
low | 1.1 | 0.0029 | 2026-06-24 | Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytoken | |
CVE-2026-44956 |
none | — | 0.0039 | 2026-06-23 | Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The name is incl | |
CVE-2026-44960 |
none | — | 0.0039 | 2026-06-23 | A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user vi | |
CVE-2026-58031 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58034 |
none | — | 0.0029 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58035 |
none | — | 0.0029 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58037 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58038 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-4765 |
none | — | 0.0044 | 2026-07-13 | Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vul | |
CVE-2026-116627 |
— | — | 0.0016 | 2026-10-27 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifica | |
CVE-2018-6882 |
— | — | 0.2976 | — | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might al | KEV |
CVE-2020-3580 |
— | — | 0.8558 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient i | KEV |
CVE-2018-19943 |
— | — | 0.2268 | — | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to | KEV |
CVE-2018-19953 |
— | — | 0.3053 | — | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to | KEV |
CVE-2025-66376 |
— | — | 0.2023 | — | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classi | KEV |
CVE-2026-28861 |
— | — | 0.0032 | 2026-03-25 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS |