Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2633)
CWE-79 (1817)
CWE-416 (1289)
CWE-862 (1174)
CWE-89 (1095)
CWE-22 (1022)
CWE-125 (878)
CWE-200 (846)
CWE-306 (837)
CWE-122 (829)
CWE-20 (793)
CWE-78 (708)
CWE-918 (688)
CWE-787 (681)
CWE-94 (639)
CWE-863 (617)
CWE-74 (600)
CWE-639 (538)
CWE-400 (521)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (438)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (366)
CWE-362 (322)
CWE-352 (275)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-58037 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-58038 |
none | — | 0.0027 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab | |
CVE-2026-4765 |
none | — | 0.0044 | 2026-07-13 | Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat feature. The vul | |
CVE-2026-116627 |
— | — | 0.0016 | 2026-10-27 | Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifica | |
CVE-2018-6882 |
— | — | 0.2976 | — | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might al | KEV |
CVE-2020-3580 |
— | — | 0.8558 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient i | KEV |
CVE-2018-19943 |
— | — | 0.2268 | — | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to | KEV |
CVE-2018-19953 |
— | — | 0.3053 | — | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to | KEV |
CVE-2025-66376 |
— | — | 0.2023 | — | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classi | KEV |
CVE-2026-28861 |
— | — | 0.0032 | 2026-03-25 | A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS | |
CVE-2026-40734 |
— | — | 0.0014 | 2026-04-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-8391 |
— | — | 0.0030 | 2026-05-12 | Other issue in the JavaScript Engine component. This vulnerability was fixed in Firefox 150.0.3, Fir | |
CVE-2026-44990 |
— | — | 0.0068 | 2026-06-12 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simp | |
CVE-2026-11998 |
— | — | 0.0040 | 2026-06-24 | A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies fo | |
CVE-2026-86898 |
— | — | 0.0034 | 2026-09-14 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 | |
CVE-2026-96379 |
— | — | 0.0015 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability i | |
CVE-2012-0767 |
— | — | 0.0619 | — | Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or | KEV |