Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (542)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47303 |
high | 8.8 | 0.0084 | 2026-07-14 | Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to ele | |
CVE-2026-49268 |
high | 8.8 | 0.0051 | 2026-06-17 | A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction i | |
CVE-2026-13696 |
high | 8.8 | 0.0052 | 2026-07-07 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i | |
CVE-2026-15723 |
high | 8.2 | 0.0043 | 2026-10-22 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 | |
CVE-2026-34578 |
high | 8.2 | 0.0042 | 2026-04-09 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authenti | |
CVE-2026-40193 |
high | 8.2 | 0.0042 | 2026-04-16 | maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vul | |
CVE-2026-4256 |
high | 8.2 | 0.0035 | 2026-07-09 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i | |
CVE-2026-44304 |
high | 8.1 | 0.0022 | 2026-05-12 | Lemur manages TLS certificate creation. Prior to 1.9.0, Lemur's LDAP authentication module (lemur/au | |
CVE-2026-11748 |
medium | 6.9 | 0.0048 | 2026-06-22 | A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, wher | |
CVE-2026-59652 |
medium | 6.9 | 0.0029 | 2026-08-03 | In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper. | |
CVE-2026-33609 |
medium | 6.5 | 0.0024 | 2026-04-22 | Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queri | |
CVE-2026-44616 |
medium | 6.5 | 0.0076 | 2026-07-30 | LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search f | |
CVE-2026-44617 |
medium | 6.5 | 0.0084 | 2026-07-30 | LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name e | |
CVE-2026-29138 |
medium | 6.3 | 0.0022 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email | |
CVE-2026-110256 |
medium | 6.3 | 0.0037 | 2026-10-13 | Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function | |
CVE-2026-0636 |
medium | 5.5 | 0.0053 | 2026-04-15 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i | |
CVE-2026-10759 |
medium | 5.5 | 0.0025 | 2026-10-13 | A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that con | |
CVE-2026-27860 |
medium | 5.3 | 0.0030 | 2026-03-27 | If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP au | |
CVE-2026-29131 |
medium | 4.9 | 0.0023 | 2026-04-02 | SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email | |
CVE-2026-93636 |
medium | 4.3 | 0.0034 | 2026-10-23 | An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated u | |
CVE-2026-57288 |
low | 3.7 | 0.0033 | 2026-06-24 | Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the |