Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2612)
CWE-79 (1782)
CWE-416 (1279)
CWE-862 (1155)
CWE-89 (1089)
CWE-22 (1005)
CWE-125 (861)
CWE-200 (838)
CWE-306 (831)
CWE-122 (821)
CWE-20 (786)
CWE-78 (697)
CWE-918 (680)
CWE-787 (674)
CWE-94 (626)
CWE-863 (601)
CWE-74 (599)
CWE-639 (531)
CWE-400 (511)
CWE-269 (499)
CWE-119 (494)
CWE-770 (428)
CWE-502 (422)
CWE-287 (419)
CWE-121 (403)
CWE-77 (371)
CWE-190 (360)
CWE-362 (319)
CWE-352 (270)
CWE-285 (240)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2024-46508 |
high | 7.5 | 0.0043 | 2026-05-08 | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not | |
CVE-2026-18449 |
high | 7.5 | 0.0034 | 2026-10-27 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attac | |
CVE-2026-13463 |
high | 7.5 | 0.0038 | 2026-07-28 | IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the | |
CVE-2026-49007 |
high | 7.5 | 0.0043 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain the initial logi | |
CVE-2026-50091 |
high | 7.4 | 0.0029 | 2026-06-12 | Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same libl | |
CVE-2026-6374 |
high | 7.3 | 0.0025 | 2026-08-10 | Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constant | |
CVE-2026-14866 |
high | 7.1 | 0.0011 | 2026-08-12 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certifica | |
CVE-2026-4832 |
medium | 6.9 | 0.0027 | 2026-04-14 | CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to s | |
CVE-2026-48244 |
medium | 6.9 | 0.0022 | 2026-05-21 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is c | |
CVE-2026-48245 |
medium | 6.9 | 0.0022 | 2026-05-21 | Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committ | |
CVE-2026-53986 |
medium | 6.9 | 0.0022 | 2026-10-21 | Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain | |
CVE-2026-25601 |
medium | 6.7 | 0.0016 | 2026-04-01 | A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik. Th | |
CVE-2026-54631 |
medium | 6.3 | 0.0011 | 2026-10-23 | Part-DB is an open source inventory management system for electronic components. Prior to version 2. | |
CVE-2026-118601 |
medium | 6.3 | — | 2026-10-28 | Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability a | |
CVE-2026-13728 |
medium | 5.9 | 0.0023 | 2026-07-03 | In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption | |
CVE-2024-32387 |
medium | 5.7 | 0.0030 | 2026-07-16 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacke | |
CVE-2026-81964 |
medium | 5.5 | 0.0035 | 2026-10-13 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t | |
CVE-2026-6574 |
medium | 5.5 | 0.0028 | 2026-04-19 | A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown pr | |
CVE-2026-7579 |
medium | 5.5 | 0.0029 | 2026-05-01 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0. This issue affects s | |
CVE-2026-8032 |
medium | 5.5 | 0.0028 | 2026-05-06 | A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is an | |
CVE-2026-63239 |
medium | 5.4 | 0.0021 | 2026-07-29 | A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared m | |
CVE-2026-47847 |
medium | 5.3 | 0.0031 | 2026-06-18 | Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credentia | |
CVE-2026-87950 |
medium | 5.3 | 0.0029 | 2026-10-22 | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve E | |
CVE-2026-56269 |
medium | 4.3 | 0.0013 | 2026-06-24 | Flowise before 3.1.0 (npm package flowise, versions 3.0.13 and earlier) uses a weak hardcoded defaul | |
CVE-2026-58245 |
low | 3.8 | 0.0029 | 2026-08-11 | SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within t | |
CVE-2026-6578 |
low | 2.9 | 0.0032 | 2026-04-19 | A security flaw has been discovered in liangliangyy DjangoBlog up to 2.1.0.0. This affects an unknow | |
CVE-2026-6610 |
low | 2.9 | 0.0027 | 2026-04-20 | A vulnerability has been found in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an | |
CVE-2019-6693 |
— | — | — | — | Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker | KEV |
CVE-2025-14611 |
— | — | 0.5330 | — | Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their impl | KEV |