Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (837)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-47131 |
critical | 10.0 | 0.0076 | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call | |
CVE-2026-47137 |
critical | 10.0 | 0.0038 | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gw | |
CVE-2026-47208 |
critical | 10.0 | 0.0104 | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox br | |
CVE-2026-53753 |
critical | 10.0 | 0.0290 | 2026-06-23 | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expres | |
CVE-2026-47210 |
critical | 9.8 | 0.0172 | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerabilit | |
CVE-2026-47698 |
critical | 9.8 | 0.0097 | 2026-08-17 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.j | |
CVE-2026-7381 |
critical | 9.1 | 0.0044 | 2026-04-29 | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewri | |
CVE-2026-71470 |
critical | 9.1 | 0.0071 | 2026-08-19 | A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specificall | |
CVE-2026-116612 |
high | 7.8 | 0.0023 | 2026-10-26 | A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed | |
CVE-2026-118538 |
medium | 5.1 | 0.0030 | 2026-10-28 | A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Ro | |
CVE-2025-68613 |
— | — | 0.9899 | — | n8n contains an improper control of dynamically managed code resources vulnerability in its workflow | KEV |