Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-55069 |
high | 8.7 | 0.0024 | 2026-06-26 | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, this vulnerability e | |
CVE-2025-30049 |
high | 8.2 | 0.0021 | 2026-10-23 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in | |
CVE-2026-116071 |
high | 8.2 | 0.0020 | 2026-10-25 | rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-forc | |
CVE-2026-65629 |
high | 7.4 | 0.0006 | 2026-10-26 | Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker w | |
CVE-2026-40522 |
high | 7.1 | 0.0023 | 2026-06-29 | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Bank Statement report ha | |
CVE-2026-5040 |
high | 7.1 | 0.0013 | 2026-07-14 | TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker wh | |
CVE-2026-57310 |
medium | 6.3 | 0.0028 | 2026-07-20 | Windu CMS uses hashing algorithm based on MD5 and SHA1 with static salt to store user passwords. Thi | |
CVE-2026-45027 |
medium | 5.9 | 0.0017 | 2026-05-27 | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, | |
CVE-2026-56272 |
medium | 5.6 | 0.0010 | 2026-06-24 | Flowise before 3.0.13 uses bcrypt with default salt rounds of 5, providing only 32 iterations instea | |
CVE-2026-9641 |
medium | 5.3 | 0.0023 | 2026-06-12 | Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iteratio | |
CVE-2026-112026 |
low | 2.9 | 0.0020 | 2026-10-18 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d | |
CVE-2026-49005 |
low | 2.4 | 0.0016 | 2026-08-07 | The root password hash of the device can be obtained through unencrypted information in the firmware | |
CVE-2026-116054 |
low | 1.2 | 0.0021 | 2026-10-25 | A security vulnerability has been detected in SH3. This affects an unknown function of the component |