Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-15497 |
medium | 5.5 | 0.0067 | 2026-07-12 | A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown fun | |
CVE-2026-18770 |
medium | 5.5 | 0.0037 | 2026-08-04 | A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e | |
CVE-2026-115970 |
medium | 5.5 | 0.0030 | 2026-10-24 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the fi | |
CVE-2026-7026 |
medium | 5.4 | 0.0056 | 2026-04-26 | A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processi | |
CVE-2026-8539 |
medium | 5.4 | 0.0016 | 2026-05-14 | Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remot | |
CVE-2026-116583 |
medium | 5.3 | 0.0027 | 2026-10-26 | Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.strin | |
CVE-2026-6218 |
medium | 5.3 | 0.0028 | 2026-04-13 | A vulnerability was found in aandrew-me ytDownloader up to 3.20.2. Affected by this issue is the fun | |
CVE-2026-6559 |
medium | 5.3 | 0.0027 | 2026-04-19 | A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of | |
CVE-2026-41645 |
medium | 5.3 | 0.0035 | 2026-05-08 | Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before ver | |
CVE-2026-29202 |
medium | 5.3 | 0.0186 | 2026-05-08 | Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary | |
CVE-2026-15538 |
medium | 5.3 | 0.0054 | 2026-07-13 | A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the functio | |
CVE-2026-15598 |
medium | 5.3 | 0.0042 | 2026-07-13 | A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the | |
CVE-2026-16150 |
medium | 5.3 | 0.0045 | 2026-07-18 | A vulnerability was found in RobinHerbots Inputmask up to 5.0.9. Affected by this issue is the funct | |
CVE-2026-16151 |
medium | 5.3 | 0.0045 | 2026-07-18 | A vulnerability has been found in CartoDB carto-api-client 0.5.29. This impacts the function addFilt | |
CVE-2026-50159 |
medium | 5.3 | 0.0060 | 2026-08-06 | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and char | |
CVE-2026-90848 |
medium | 5.3 | 0.0047 | 2026-09-15 | A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function | |
CVE-2026-115351 |
medium | 5.3 | 0.0022 | 2026-10-22 | Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers control | |
CVE-2026-116058 |
medium | 5.3 | 0.0038 | 2026-10-25 | A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.692. Affected by this issue is the fu | |
CVE-2026-116275 |
medium | 5.3 | 0.0029 | 2026-10-26 | A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.re | |
CVE-2026-0298 |
medium | 5.2 | 0.0066 | 2026-08-13 | An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) co | |
CVE-2026-116229 |
medium | 5.1 | 0.0020 | 2026-10-26 | A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. Impacted is the fun | |
CVE-2026-6107 |
medium | 5.1 | 0.0021 | 2026-04-12 | A flaw has been found in 1Panel-dev MaxKB up to 2.6.1. This issue affects some unknown processing of | |
CVE-2026-15493 |
medium | 5.1 | 0.0033 | 2026-07-12 | A vulnerability was detected in Akpali9 Attendance-Management-System up to 70b91fe38f4195b701a45f0ed | |
CVE-2026-116063 |
medium | 5.1 | 0.0025 | 2026-10-25 | A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of th | |
CVE-2026-116385 |
medium | 5.1 | 0.0024 | 2026-10-26 | A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.0. This | |
CVE-2026-115535 |
medium | 4.8 | 0.0021 | 2026-10-23 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d4 | |
CVE-2026-117526 |
medium | 4.8 | 0.0014 | 2026-10-27 | A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the fun | |
CVE-2026-6623 |
medium | 4.8 | 0.0021 | 2026-04-20 | A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20. This impacts an u | |
CVE-2026-42890 |
medium | 4.8 | 0.0013 | 2026-06-12 | Actual is an open-source personal finance application. In the macOS desktop application version 25.x | |
CVE-2026-112249 |
medium | 4.8 | 0.0040 | 2026-10-19 | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw | |
CVE-2026-103234 |
medium | 4.8 | 0.0022 | 2026-10-22 | The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the re | |
CVE-2026-115981 |
medium | 4.8 | 0.0025 | 2026-10-24 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is | |
CVE-2026-116227 |
medium | 4.8 | 0.0021 | 2026-10-26 | A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of | |
CVE-2026-41692 |
medium | 4.7 | 0.0014 | 2026-05-07 | i18nextify is a JavaScript library that adds website internationalization via a script tag, without | |
CVE-2026-112949 |
medium | 4.7 | 0.0034 | 2026-10-20 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 | |
CVE-2026-40129 |
medium | 4.3 | 0.0026 | 2026-05-12 | Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Plat | |
CVE-2026-81472 |
medium | 4.2 | 0.0017 | 2026-10-28 | Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDR | |
CVE-2026-8021 |
medium | 4.2 | 0.0015 | 2026-05-06 | Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinc | |
CVE-2024-4412 |
low | 2.7 | 0.0037 | 2026-10-19 | The software accepts user-supplied data without sufficient validation, allowing for the injection of | |
CVE-2026-116514 |
low | 2.1 | 0.0035 | 2026-10-26 | A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unkno | |
CVE-2026-0586 |
low | 2.1 | 0.0037 | 2026-01-05 | A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected el | |
CVE-2026-4963 |
low | 2.1 | 0.0059 | 2026-03-27 | A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function eval | |
CVE-2026-5255 |
low | 2.1 | 0.0027 | 2026-04-01 | A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown par | |
CVE-2026-5319 |
low | 2.1 | 0.0034 | 2026-04-02 | A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affe | |
CVE-2026-6032 |
low | 2.1 | 0.0036 | 2026-04-10 | A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown functi | |
CVE-2026-6034 |
low | 2.1 | 0.0034 | 2026-04-10 | A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknow | |
CVE-2026-6035 |
low | 2.1 | 0.0034 | 2026-04-10 | A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected | |
CVE-2026-6125 |
low | 2.1 | 0.0030 | 2026-04-12 | A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelH | |
CVE-2026-6150 |
low | 2.1 | 0.0026 | 2026-04-13 | A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown p | |
CVE-2026-6159 |
low | 2.1 | 0.0027 | 2026-04-13 | A vulnerability has been found in code-projects Simple ChatBox up to 1.0. Affected by this vulnerabi |