Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1853)
CWE-416 (1298)
CWE-862 (1187)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (847)
CWE-306 (839)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15752 |
medium | 5.5 | 0.0050 | 2026-07-14 | A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f92 | |
CVE-2026-16215 |
medium | 5.5 | 0.0055 | 2026-07-19 | A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown fun | |
CVE-2026-43665 |
medium | 5.5 | 0.0013 | 2026-07-27 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15 | |
CVE-2026-19345 |
medium | 5.5 | 0.0055 | 2026-08-09 | A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part | |
CVE-2026-47718 |
medium | 5.5 | 0.0046 | 2026-08-12 | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. When `secureEnabled=true`, | |
CVE-2026-28850 |
medium | 5.5 | 0.0014 | 2026-10-20 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Se | |
CVE-2026-86932 |
medium | 5.5 | 0.0014 | 2026-10-20 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Go | |
CVE-2026-112616 |
medium | 5.5 | 0.0021 | 2026-10-26 | An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 a | |
CVE-2026-86925 |
medium | 5.5 | 0.0021 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 | |
CVE-2026-112455 |
medium | 5.5 | 0.0024 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-112506 |
medium | 5.5 | 0.0020 | 2026-10-26 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate | |
CVE-2026-112533 |
medium | 5.5 | 0.0022 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Go | |
CVE-2026-112559 |
medium | 5.5 | 0.0023 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-112609 |
medium | 5.5 | 0.0018 | 2026-10-26 | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An a | |
CVE-2026-112675 |
medium | 5.5 | 0.0022 | 2026-10-26 | This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gat | |
CVE-2026-112678 |
medium | 5.5 | 0.0022 | 2026-10-26 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 an | |
CVE-2026-112685 |
medium | 5.5 | 0.0023 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 | |
CVE-2026-112701 |
medium | 5.5 | 0.0017 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-112706 |
medium | 5.5 | 0.0021 | 2026-10-26 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 an | 1 PoC |
CVE-2026-113914 |
medium | 5.5 | 0.0017 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-43736 |
medium | 5.5 | 0.0021 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Go | |
CVE-2026-65397 |
medium | 5.5 | 0.0024 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-86920 |
medium | 5.5 | 0.0024 | 2026-10-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 | |
CVE-2026-86987 |
medium | 5.5 | 0.0019 | 2026-10-26 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27 | |
CVE-2025-7043 |
medium | 5.4 | 0.0018 | 2026-10-19 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be t | |
CVE-2026-117469 |
medium | 5.4 | 0.0034 | 2026-10-27 | Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer c | |
CVE-2026-116855 |
medium | 5.4 | 0.0014 | 2026-10-28 | Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition | |
CVE-2026-50542 |
medium | 5.4 | 0.0025 | 2026-10-28 | Xibo is an open source digital signage platform with a web content management system and Windows dis | |
CVE-2026-75520 |
medium | 5.4 | 0.0028 | 2026-10-28 | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. | |
CVE-2026-117627 |
medium | 5.4 | 0.0025 | 2026-10-29 | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. W | |
CVE-2025-64212 |
medium | 5.4 | 0.0022 | 2025-10-29 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-m | |
CVE-2025-67562 |
medium | 5.4 | 0.0027 | 2025-12-09 | Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-pr | |
CVE-2026-34247 |
medium | 5.4 | 0.0025 | 2026-03-27 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Live | |
CVE-2026-33887 |
medium | 5.4 | 0.0015 | 2026-03-27 | Statamic is a Laravel and Git powered content management system (CMS). Prior to versions 5.73.16 and | |
CVE-2026-34903 |
medium | 5.4 | 0.0029 | 2026-04-07 | Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured | |
CVE-2026-40132 |
medium | 5.4 | 0.0019 | 2026-05-12 | Due to missing authorization check in SAP Strategic Enterprise Management (Scorecard Wizard in Busin | |
CVE-2026-45210 |
medium | 5.4 | 0.0017 | 2026-05-12 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Inc | |
CVE-2026-57291 |
medium | 5.4 | 0.0023 | 2026-06-24 | Missing permission checks in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allow attackers | |
CVE-2026-57294 |
medium | 5.4 | 0.0025 | 2026-06-24 | A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows a | |
CVE-2026-57304 |
medium | 5.4 | 0.0025 | 2026-06-24 | A missing permission check in Jenkins Assembla Plugin 1.4 and earlier allows attackers with Overall/ | |
CVE-2026-56023 |
medium | 5.4 | 0.0029 | 2026-06-25 | Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce <= 1.6.2 versions. | |
CVE-2026-57632 |
medium | 5.4 | 0.0029 | 2026-06-26 | Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions. | |
CVE-2026-57661 |
medium | 5.4 | 0.0029 | 2026-06-26 | Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. | |
CVE-2026-58589 |
medium | 5.4 | 0.0023 | 2026-07-10 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects | |
CVE-2026-58590 |
medium | 5.4 | 0.0023 | 2026-07-10 | Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects | |
CVE-2026-61958 |
medium | 5.4 | 0.0029 | 2026-07-13 | Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-fo | |
CVE-2026-61968 |
medium | 5.4 | 0.0029 | 2026-07-13 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Config | |
CVE-2026-62348 |
medium | 5.4 | 0.0025 | 2026-07-15 | TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDen | |
CVE-2026-61718 |
medium | 5.4 | 0.0043 | 2026-07-16 | bunkerweb is an Open-source and next-generation Web Application Firewall (WAF). From 1.6.2 until 1.6 | |
CVE-2026-63141 |
medium | 5.4 | 0.0023 | 2026-07-21 | Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Co |