Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-59644 |
high | 8.7 | 0.0049 | 2026-08-03 | In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter | |
CVE-2026-64641 |
high | 8.2 | 0.0086 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15 | |
CVE-2026-109299 |
high | 7.1 | 0.0038 | 2026-10-12 | Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authentic | |
CVE-2026-115580 |
high | 7.1 | 0.0041 | 2026-10-23 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PD | |
CVE-2026-115911 |
medium | 6.5 | 0.0031 | 2026-10-26 | vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authent | |
CVE-2026-40347 |
medium | 5.3 | 0.0035 | 2026-04-18 | Python-Multipart is a streaming multipart parser for Python. Versions prior to 0.0.26 have a denial | |
CVE-2026-71852 |
medium | 4.8 | 0.0013 | 2026-08-07 | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause lo |