Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-96642 |
high | 7.1 | 0.0034 | 2026-10-21 | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accep | |
CVE-2026-42781 |
high | 7.1 | 0.0018 | 2026-05-13 | When embedded Packet Velocity Acceleration (ePVA) acceleration is configured, undisclosed local ethe | |
CVE-2026-55865 |
high | 7.1 | 0.0045 | 2026-07-09 | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.1, given a malformed | |
CVE-2026-70462 |
high | 7.1 | 0.0045 | 2026-08-13 | rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout impleme | |
CVE-2026-54623 |
high | 7.1 | 0.0049 | 2026-08-20 | django CMS is an easy-to-use and developer-friendly enterprise content management system powered by | |
CVE-2026-109941 |
high | 7.1 | 0.0033 | 2026-10-13 | FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that | |
CVE-2026-110836 |
high | 7.1 | 0.0031 | 2026-10-14 | FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() tha | |
CVE-2025-71397 |
high | 7.1 | 0.0055 | 2026-07-18 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with O | |
CVE-2026-119205 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinit | |
CVE-2026-119203 |
high | 7.1 | — | 2026-10-29 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinit | |
CVE-2026-54530 |
medium | 6.9 | 0.0017 | 2026-06-22 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this | |
CVE-2026-54531 |
medium | 6.9 | 0.0017 | 2026-06-22 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this | |
CVE-2026-54651 |
medium | 6.9 | 0.0016 | 2026-06-22 | pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this | |
CVE-2026-16551 |
medium | 6.9 | 0.0043 | 2026-07-22 | Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocatio | |
CVE-2026-72712 |
medium | 6.9 | 0.0050 | 2026-08-11 | Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote | |
CVE-2026-49495 |
medium | 6.7 | 0.0015 | 2026-06-10 | Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.pa | |
CVE-2026-45820 |
medium | 6.6 | 0.0028 | 2026-07-22 | fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A craft | |
CVE-2026-109088 |
medium | 6.5 | 0.0027 | 2026-10-27 | A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client us | |
CVE-2026-34852 |
medium | 6.5 | 0.0016 | 2026-04-13 | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerab | |
CVE-2026-14258 |
medium | 6.5 | 0.0040 | 2026-07-01 | A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially cr | |
CVE-2026-62642 |
medium | 6.5 | 0.0052 | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TN | |
CVE-2026-12236 |
medium | 6.5 | 0.0016 | 2026-08-13 | The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c p | |
CVE-2026-112391 |
medium | 6.3 | 0.0058 | 2026-10-19 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recu | |
CVE-2026-46378 |
medium | 6.2 | 0.0016 | 2026-07-16 | Dasel is a command-line tool and library for querying, modifying, and transforming data structures. | |
CVE-2026-68499 |
medium | 6.2 | 0.0018 | 2026-07-30 | re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's Str | |
CVE-2026-113793 |
medium | 6.0 | 0.0047 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a | |
CVE-2026-113794 |
medium | 6.0 | 0.0047 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an i | |
CVE-2026-28214 |
medium | 6.0 | 0.0113 | 2026-04-17 | Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 | |
CVE-2026-113792 |
medium | 6.0 | 0.0047 | 2026-10-21 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_out | |
CVE-2026-66281 |
medium | 6.0 | 0.0029 | 2026-10-22 | In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with un | |
CVE-2026-50324 |
medium | 5.9 | 0.0086 | 2026-07-14 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD F | |
CVE-2026-96596 |
medium | 5.9 | 0.0021 | 2026-10-14 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar m | |
CVE-2026-20019 |
medium | 5.8 | 0.0053 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that | |
CVE-2026-6985 |
medium | 5.5 | 0.0056 | 2026-04-25 | A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the functi | |
CVE-2026-6522 |
medium | 5.5 | 0.0012 | 2026-04-30 | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows | |
CVE-2026-6528 |
medium | 5.5 | 0.0014 | 2026-04-30 | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service | |
CVE-2026-41511 |
medium | 5.5 | 0.0019 | 2026-05-08 | OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also kno | |
CVE-2026-8318 |
medium | 5.5 | 0.0037 | 2026-05-11 | A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929 | |
CVE-2026-7771 |
medium | 5.5 | 0.0015 | 2026-07-17 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a sp | |
CVE-2026-54886 |
medium | 5.3 | 0.0033 | 2026-07-02 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd mo | |
CVE-2026-71436 |
medium | 5.3 | 0.0058 | 2026-08-06 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and char | |
CVE-2026-106116 |
medium | 5.3 | 0.0033 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-b | |
CVE-2026-106568 |
medium | 5.3 | 0.0038 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior | |
CVE-2026-76445 |
medium | 5.3 | 0.0053 | 2026-10-21 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could a | |
CVE-2026-71227 |
medium | 5.1 | 0.0020 | 2026-08-05 | A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchrono | |
CVE-2026-115774 |
medium | 4.9 | 0.0043 | 2026-10-23 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.1 | |
CVE-2026-48986 |
medium | 4.7 | 0.0014 | 2026-06-18 | pam_usb provides hardware authentication for Linux using removable media. In pam_usb 0.9.1 and earli | |
CVE-2026-10642 |
medium | 4.6 | 0.0024 | 2026-06-24 | The Zephyr PL011 UART driver (drivers/serial/uart_pl011.c) contains an unbounded software loop in pl | |
CVE-2026-6684 |
medium | 4.6 | 0.0031 | 2026-07-01 | FatFs prior to R0.16 that use GPT scanning with 'FF_LBA64 = 1' contains an issue where an unbounded | |
CVE-2026-56289 |
medium | 4.6 | 0.0011 | 2026-07-09 | GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single bloc |