Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (837)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-112406 |
high | 8.7 | 0.0057 | 2026-10-19 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while | |
CVE-2026-41146 |
high | 8.7 | 0.0037 | 2026-04-22 | facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a9 | |
CVE-2026-41680 |
high | 8.7 | 0.0034 | 2026-04-24 | Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) | |
CVE-2026-39806 |
high | 8.7 | 0.0064 | 2026-05-13 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauth | |
CVE-2026-42920 |
high | 8.7 | 0.0026 | 2026-05-13 | When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, un | |
CVE-2026-54417 |
high | 8.7 | 0.0042 | 2026-06-17 | An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remot | |
CVE-2026-59874 |
high | 8.7 | 0.0043 | 2026-07-08 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a c | |
CVE-2026-59935 |
high | 8.7 | 0.0062 | 2026-07-08 | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PD | |
CVE-2026-64834 |
high | 8.7 | 0.0073 | 2026-07-22 | FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer wi | |
CVE-2026-43871 |
high | 8.7 | 0.0103 | 2026-07-27 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PH | |
CVE-2026-66730 |
high | 8.7 | 0.0078 | 2026-07-27 | facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the multipart body parser | |
CVE-2026-8798 |
high | 8.7 | 0.0043 | 2026-08-08 | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Inte | |
CVE-2026-111074 |
high | 8.7 | 0.0042 | 2026-10-21 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentic | |
CVE-2026-115269 |
high | 8.7 | 0.0060 | 2026-10-26 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader | |
CVE-2026-111731 |
high | 8.7 | — | 2026-10-29 | P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck reco | |
CVE-2026-54904 |
high | 8.2 | 0.0067 | 2026-06-24 | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReference# | |
CVE-2026-67213 |
high | 8.2 | 0.0033 | 2026-07-29 | nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom funct | |
CVE-2026-67214 |
high | 8.2 | 0.0033 | 2026-07-29 | nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid | |
CVE-2026-112390 |
high | 8.2 | 0.0059 | 2026-10-19 | Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while | |
CVE-2026-63889 |
high | 8.1 | 0.0036 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_transport_fc: Widen | |
CVE-2026-92387 |
high | 8.1 | 0.0034 | 2026-10-20 | By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server | |
CVE-2026-118035 |
high | 7.5 | 0.0029 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-118036 |
high | 7.5 | 0.0037 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-118037 |
high | 7.5 | 0.0027 | 2026-10-28 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recur | |
CVE-2026-103410 |
high | 7.5 | 0.0032 | 2026-10-28 | An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart R | |
CVE-2026-50647 |
high | 7.5 | 0.0117 | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F | |
CVE-2026-50653 |
high | 7.5 | 0.0117 | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthori | |
CVE-2026-54119 |
high | 7.5 | 0.0117 | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unautho | |
CVE-2026-7375 |
high | 7.5 | 0.0019 | 2026-04-30 | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial o | |
CVE-2026-6519 |
high | 7.5 | 0.0017 | 2026-04-30 | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial | |
CVE-2026-6520 |
high | 7.5 | 0.0017 | 2026-04-30 | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows | |
CVE-2026-33814 |
high | 7.5 | 0.0084 | 2026-05-07 | When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATIO | |
CVE-2026-44302 |
high | 7.5 | 0.0032 | 2026-05-12 | Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1 | |
CVE-2026-59877 |
high | 7.5 | 0.0037 | 2026-07-08 | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.6.5 and 8.6.6, p | |
CVE-2026-15163 |
high | 7.5 | 0.0033 | 2026-07-08 | Multiple protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allow den | |
CVE-2026-59203 |
high | 7.5 | 0.0040 | 2026-07-14 | Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImageP | |
CVE-2026-13397 |
high | 7.5 | 0.0061 | 2026-07-16 | HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attri | |
CVE-2026-13401 |
high | 7.5 | 0.0061 | 2026-07-16 | XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attrib | |
CVE-2026-54538 |
high | 7.5 | 0.0067 | 2026-07-20 | xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the | |
CVE-2026-56852 |
high | 7.5 | 0.0047 | 2026-07-21 | A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. | |
CVE-2026-59933 |
high | 7.5 | 0.0046 | 2026-07-28 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 th | |
CVE-2026-10686 |
high | 7.5 | 0.0052 | 2026-07-31 | Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop | |
CVE-2026-16931 |
high | 7.5 | 0.0055 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to impro | |
CVE-2026-6554 |
high | 7.5 | 0.0044 | 2026-09-05 | libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to imple | |
CVE-2026-106565 |
high | 7.5 | 0.0042 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-106567 |
high | 7.5 | 0.0042 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-110354 |
high | 7.5 | 0.0081 | 2026-10-22 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persis | |
CVE-2026-116581 |
high | 7.5 | 0.0045 | 2026-10-26 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.strin | |
CVE-2026-63570 |
high | 7.1 | 0.0023 | 2026-10-02 | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Cast | |
CVE-2026-63575 |
high | 7.1 | 0.0022 | 2026-10-02 | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Le |