Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-18774 |
low | 2.1 | 0.0035 | 2026-08-04 | A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_ | |
CVE-2026-18775 |
low | 2.1 | 0.0038 | 2026-08-04 | A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects | |
CVE-2026-19040 |
low | 2.1 | 0.0030 | 2026-08-06 | A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown funct | |
CVE-2026-19246 |
low | 2.1 | 0.0037 | 2026-08-07 | A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_ima | |
CVE-2026-19339 |
low | 2.1 | 0.0037 | 2026-08-09 | A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The im | |
CVE-2026-19340 |
low | 2.1 | 0.0035 | 2026-08-09 | A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown func | |
CVE-2026-19367 |
low | 2.1 | 0.0026 | 2026-08-09 | A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is a | |
CVE-2026-19375 |
low | 2.1 | 0.0045 | 2026-08-10 | A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the | |
CVE-2026-112288 |
low | 2.1 | 0.0022 | 2026-10-19 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users | |
CVE-2026-112297 |
low | 2.1 | 0.0031 | 2026-10-19 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the func | |
CVE-2026-8320 |
low | 2.0 | 0.0022 | 2026-05-11 | A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function | |
CVE-2026-18856 |
low | 2.0 | 0.0040 | 2026-08-05 | A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImpo | |
CVE-2026-5323 |
low | 1.9 | 0.0013 | 2026-04-02 | A vulnerability was found in priyankark a11y-mcp up to 1.0.5. This vulnerability affects the functio | |
CVE-2026-19337 |
low | 1.9 | 0.0017 | 2026-08-09 | A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown funct | |
CVE-2026-19369 |
low | 1.9 | 0.0015 | 2026-08-09 | A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of | |
CVE-2026-19373 |
low | 1.9 | 0.0017 | 2026-08-09 | A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue | |
CVE-2026-40072 |
low | 1.7 | 0.0023 | 2026-04-09 | web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.1 | |
CVE-2026-19352 |
low | 1.3 | 0.0030 | 2026-08-09 | A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unk | |
CVE-2021-26855 |
— | — | 1.0000 | — | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio | KEV |
CVE-2021-21975 |
— | — | 0.7800 | — | Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malic | KEV |
CVE-2021-21985 |
— | — | 1.0000 | — | VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health | KEV |
CVE-2021-22175 |
— | — | 0.5337 | — | GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal net | KEV |
CVE-2021-34473 |
— | — | 1.0000 | — | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio | KEV |
CVE-2021-40438 |
— | — | 1.0000 | — | A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by | KEV |
CVE-2021-22054 |
— | — | 0.9968 | — | Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request | KEV |
CVE-2024-21893 |
— | — | 1.0000 | — | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivant | KEV |
CVE-2025-61884 |
— | — | 0.9589 | — | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime c | KEV |
CVE-2026-41481 |
— | — | 0.0026 | 2026-04-24 | LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-s | |
CVE-2026-44578 |
— | — | 0.3554 | 2026-05-13 | Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.1 | |
CVE-2026-20230 |
— | — | 0.8820 | — | Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session M | KEV |
CVE-2026-48818 |
— | — | 0.0037 | 2026-06-17 | Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Win | |
CVE-2026-44016 |
— | — | 0.0059 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-12992 |
— | — | 0.0034 | 2026-06-25 | A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without di | |
CVE-2026-83548 |
— | — | 0.0804 | — | SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a | KEV |
CVE-2026-96652 |
— | — | 0.0182 | — | Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an a | KEV |
CVE-2026-96655 |
— | — | 0.0164 | — | Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an au | KEV |