Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2632)
CWE-79 (1807)
CWE-416 (1283)
CWE-862 (1172)
CWE-89 (1092)
CWE-22 (1018)
CWE-125 (869)
CWE-200 (844)
CWE-306 (834)
CWE-122 (828)
CWE-20 (791)
CWE-78 (703)
CWE-918 (686)
CWE-787 (681)
CWE-94 (637)
CWE-863 (613)
CWE-74 (600)
CWE-639 (535)
CWE-400 (516)
CWE-269 (501)
CWE-119 (494)
CWE-502 (467)
CWE-770 (435)
CWE-287 (427)
CWE-121 (404)
CWE-77 (372)
CWE-190 (365)
CWE-362 (321)
CWE-352 (274)
CWE-285 (242)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2024-20359 |
— | — | 0.1882 | — | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escal | KEV |
CVE-2024-23692 |
— | — | 0.9949 | — | Rejetto HTTP File Server contains an improper neutralization of special elements used in a template | KEV |
CVE-2025-3248 |
— | — | 0.9999 | — | Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that | KEV |
CVE-2025-32432 |
— | — | 0.9979 | — | Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary | KEV |
CVE-2025-3928 |
— | — | 0.0253 | — | Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attac | KEV |
CVE-2025-62593 |
— | — | 0.6015 | — | Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Deve | KEV |
CVE-2026-33937 |
— | — | 0.0191 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-33938 |
— | — | 0.0072 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-33940 |
— | — | 0.0072 | 2026-03-27 | Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr | |
CVE-2026-35093 |
— | — | 0.0018 | 2026-04-01 | A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file i | |
CVE-2026-34197 |
— | — | 0.9826 | 2026-04-07 | Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. | KEV |
CVE-2026-40217 |
— | — | 0.1553 | 2026-04-10 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting | |
CVE-2026-41246 |
— | — | 0.0049 | 2026-04-23 | Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32. | |
CVE-2026-40466 |
— | — | 0.0478 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-41044 |
— | — | 0.0098 | 2026-04-24 | Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability i | |
CVE-2026-24118 |
— | — | 0.0091 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox br | |
CVE-2026-24120 |
— | — | 0.0090 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is | |
CVE-2026-24781 |
— | — | 0.0119 | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox br | |
CVE-2026-8094 |
— | — | 0.0045 | 2026-05-07 | Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunde | |
CVE-2026-43997 |
— | — | 0.0098 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain the host Obj | |
CVE-2026-44005 |
— | — | 0.0083 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable pro | |
CVE-2026-44006 |
— | — | 0.0081 | 2026-05-13 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.g | |
CVE-2026-44513 |
— | — | 0.0107 | 2026-05-14 | Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code by | |
CVE-2026-41523 |
— | — | 0.0091 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert | |
CVE-2026-44016 |
— | — | 0.0059 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-72530 |
— | — | 0.0169 | — | TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote atta | KEV |
CVE-2026-60004 |
— | — | 0.2399 | — | Gitea contains a code injection vulnerability that allows an attacker with repository write access t | KEV |
CVE-2026-0322 |
— | — | 0.0174 | — | Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated | KEV |
CVE-2008-4250 |
— | — | 0.9875 | — | Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows | KEV |
CVE-2009-0238 |
— | — | 0.4294 | — | Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker t | KEV |
CVE-2009-1151 |
— | — | 0.9657 | — | Setup script used to generate configuration can be fooled using a crafted POST request to include ar | KEV |
CVE-2009-0556 |
— | — | 0.6731 | — | Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to | KEV |
CVE-2009-0557 |
— | — | 0.5284 | — | Microsoft Office contains an object record corruption vulnerability that allows remote attackers to | KEV |
CVE-2012-0391 |
— | — | 0.7560 | — | The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input valida | KEV |
CVE-2012-0158 |
— | — | 0.9998 | — | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, | KEV |
CVE-2012-1535 |
— | — | 0.7038 | — | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or | KEV |
CVE-2013-4810 |
— | — | 0.7947 | — | HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | KEV |