Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2639)
CWE-79 (1895)
CWE-416 (1379)
CWE-862 (1223)
CWE-89 (1114)
CWE-22 (1034)
CWE-125 (931)
CWE-306 (859)
CWE-200 (856)
CWE-122 (832)
CWE-20 (802)
CWE-787 (729)
CWE-78 (723)
CWE-918 (699)
CWE-863 (659)
CWE-94 (649)
CWE-74 (604)
CWE-639 (570)
CWE-400 (535)
CWE-269 (506)
CWE-119 (504)
CWE-502 (478)
CWE-770 (449)
CWE-287 (443)
CWE-121 (410)
CWE-190 (380)
CWE-77 (375)
CWE-362 (374)
CWE-476 (305)
CWE-352 (288)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2024-9379 |
— | — | 0.4427 | — | Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web consol | KEV |
CVE-2025-57819 |
— | — | 0.9521 | — | Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user | KEV |
CVE-2026-9082 |
— | — | 0.8938 | — | Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and rem | KEV |
CVE-2026-60137 |
— | — | 0.0532 | — | WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input | KEV |
CVE-2026-70369 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/acquisitions_stats.pl builds its per-cell statistics query in sub calculate by interp | |
CVE-2026-70370 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate by interpolating the user-cont | |
CVE-2026-70371 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate by concatenating several user | |
CVE-2026-70372 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by concatenating several user-c | |
CVE-2026-70373 |
— | — | 0.0057 | 2026-08-04 | Koha's reports/issues_stats.pl (the circulation statistics report) builds its calculation query in s | |
CVE-2026-72898 |
— | — | 0.9855 | — | Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to in | KEV |
CVE-2026-76461 |
— | — | 0.2954 | — | Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability t | KEV |
CVE-2026-87938 |
— | — | 0.0017 | 2026-10-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-65874 |
— | — | 0.0028 | 2026-10-30 | This issue affects Apache Fineract versions up to and including 1.15.0. The Center read endpoint (GE | |
CVE-2026-64618 |
— | — | 0.0023 | 2026-10-30 | Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability e |