Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2630)
CWE-79 (1805)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (612)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (426)
CWE-121 (404)
CWE-77 (372)
CWE-190 (364)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-45733 |
high | 8.3 | 0.0043 | 2026-08-18 | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large pe | |
CVE-2026-49276 |
high | 7.4 | 0.0043 | 2026-07-09 | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kirby sites using the w | |
CVE-2026-61791 |
high | 7.4 | 0.0029 | 2026-10-22 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deploym | |
CVE-2026-58263 |
high | 7.2 | 0.0022 | 2026-07-01 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. In versions prior to 4 | |
CVE-2026-112353 |
medium | 6.2 | 0.0024 | 2026-10-27 | GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulner | |
CVE-2023-32070 |
medium | 6.1 | 0.0065 | 2023-05-10 | XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check f | |
CVE-2026-62324 |
medium | 5.4 | 0.0031 | 2026-07-31 | Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.12.31, Jodi | |
CVE-2026-112356 |
medium | 5.1 | 0.0025 | 2026-10-28 | GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability | |
CVE-2026-15920 |
medium | 5.1 | 0.0035 | 2026-08-04 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `django.contrib.admin.util | |
CVE-2026-48591 |
medium | 4.8 | 0.0013 | 2026-06-17 | Improper Neutralization of Script in Attributes in a Web Page vulnerability in pragdave earmark allo | |
CVE-2026-59727 |
low | 2.1 | 0.0039 | 2026-07-27 | Astro is a web framework for content-driven websites. In versions 3.10.0 through 7.0.3, when a trans |