Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-0697 |
low | 2.0 | 0.0036 | 2026-01-08 | A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element | |
CVE-2026-0698 |
low | 2.0 | 0.0040 | 2026-01-08 | A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affect | |
CVE-2026-0699 |
low | 2.0 | 0.0036 | 2026-01-08 | A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an | |
CVE-2026-0701 |
low | 2.0 | 0.0037 | 2026-01-08 | A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by | |
CVE-2026-5838 |
low | 2.0 | 0.0020 | 2026-04-09 | A vulnerability was determined in PHPGurukul News Portal Project 4.1. This vulnerability affects unk | |
CVE-2026-5839 |
low | 2.0 | 0.0020 | 2026-04-09 | A vulnerability was identified in PHPGurukul News Portal Project 4.1. This issue affects some unknow | |
CVE-2026-5840 |
low | 2.0 | 0.0020 | 2026-04-09 | A security flaw has been discovered in PHPGurukul News Portal Project 4.1. Impacted is an unknown fu | |
CVE-2026-7028 |
low | 2.0 | 0.0031 | 2026-04-26 | A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an u | |
CVE-2026-7083 |
low | 2.0 | 0.0025 | 2026-04-27 | A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this iss | |
CVE-2026-7282 |
low | 2.0 | 0.0021 | 2026-04-28 | A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affec | |
CVE-2026-7283 |
low | 2.0 | 0.0026 | 2026-04-28 | A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This | |
CVE-2026-7293 |
low | 2.0 | 0.0021 | 2026-04-28 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the functio | |
CVE-2026-7394 |
low | 2.0 | 0.0024 | 2026-04-29 | A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vuln | |
CVE-2026-7407 |
low | 2.0 | 0.0025 | 2026-04-29 | A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected | |
CVE-2026-7408 |
low | 2.0 | 0.0025 | 2026-04-29 | A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue | |
CVE-2026-7409 |
low | 2.0 | 0.0020 | 2026-04-29 | A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save | |
CVE-2026-7553 |
low | 2.0 | 0.0021 | 2026-05-01 | A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability | |
CVE-2026-7612 |
low | 2.0 | 0.0021 | 2026-05-02 | A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown | |
CVE-2026-7697 |
low | 2.0 | 0.0021 | 2026-05-03 | A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown | |
CVE-2026-8772 |
low | 2.0 | 0.0021 | 2026-05-18 | A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function o | |
CVE-2026-12789 |
low | 2.0 | 0.0033 | 2026-06-21 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the func | |
CVE-2026-13495 |
low | 2.0 | 0.0035 | 2026-06-28 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknow | |
CVE-2026-13569 |
low | 2.0 | 0.0035 | 2026-06-29 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects so | |
CVE-2026-15494 |
low | 2.0 | 0.0033 | 2026-07-12 | A flaw has been found in AMTT Hotel Broadband Operation System 1.0. Impacted is an unknown function | |
CVE-2026-57588 |
low | 1.8 | 0.0033 | 2026-06-25 | A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file tha | |
CVE-2026-7688 |
low | 1.3 | 0.0022 | 2026-05-03 | A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkVal | |
CVE-2017-18362 |
— | — | 0.8682 | — | ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote command | KEV |
CVE-2019-7481 |
— | — | 0.9991 | — | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain rea | KEV |
CVE-2020-29574 |
— | — | 0.0470 | — | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthentica | KEV |
CVE-2021-20016 |
— | — | 0.4004 | — | SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for c | KEV |
CVE-2024-9379 |
— | — | 0.4427 | — | Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web consol | KEV |
CVE-2025-57819 |
— | — | 0.9521 | — | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user | KEV |
CVE-2026-9082 |
— | — | 0.8938 | — | Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and rem | KEV |
CVE-2026-60137 |
— | — | 0.0532 | — | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input | KEV |
CVE-2026-70369 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interp | |
CVE-2026-70370 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-cont | |
CVE-2026-70371 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user | |
CVE-2026-70372 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-c | |
CVE-2026-70373 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in s | |
CVE-2026-72898 |
— | — | 0.9855 | — | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to in | KEV |
CVE-2026-76461 |
— | — | 0.2954 | — | Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability t | KEV |
CVE-2026-87938 |
— | — | 0.0017 | 2026-10-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i |