Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (880)
CWE-200 (847)
CWE-306 (838)
CWE-122 (830)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (541)
CWE-400 (530)
CWE-269 (501)
CWE-119 (494)
CWE-502 (470)
CWE-770 (440)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-112408 |
critical | 9.4 | 0.0074 | 2026-10-21 | Missing verification of source of a communication channel in the default_bucket() function in Amazon | |
CVE-2026-33875 |
critical | 9.3 | 0.0027 | 2026-03-27 | Gematik Authenticator securely authenticates users for login to digital health applications. Version | |
CVE-2026-48745 |
critical | 9.3 | 0.0032 | 2026-06-17 | Traccar Client is a GPS tracking mobile app for sending location updates to private servers using th | |
CVE-2026-40434 |
high | 8.1 | 0.0023 | 2026-04-17 | Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packe | |
CVE-2026-87705 |
high | 7.4 | 0.0043 | 2026-10-13 | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized | |
CVE-2026-66279 |
high | 7.2 | 0.0024 | 2026-10-22 | In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security set | |
CVE-2026-43880 |
medium | 5.3 | 0.0029 | 2026-05-11 | WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/sendEmai | |
CVE-2026-89409 |
medium | 5.3 | 0.0027 | 2026-10-22 | In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series | |
CVE-2026-101897 |
medium | 5.1 | 0.0035 | 2026-10-14 | Angular is a development platform for building mobile and desktop web applications using TypeScript/ | |
CVE-2026-23866 |
medium | 4.3 | 0.0047 | 2026-05-01 | Incomplete validation of AI rich response messages for Instagram Reels in WhatsApp for iOS v2.25.8.0 | |
CVE-2025-61932 |
— | — | 0.0277 | — | Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication chann | KEV |