Weaknesses of type CWE-20
4,751 resultsCVE-2026-22598HIGHManageIQ vulnerable to DoS Attack when creating TimeProfilesEPSS 0.3%CVE-2025-40831HIGHA vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks input validation of dEPSS 0.3%CVE-2026-59724HIGHSocket.IO: Engine.IO WebTransport SID DoSEPSS 0.3%CVE-2026-33894HIGHForge has signature forgery in RSA-PKCS due to ASN.1 extra fieldEPSS 0.3%CVE-2025-43464MEDIUMA denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Tahoe 26.1. Visiting a website may leadEPSS 0.3%CVE-2026-9497MEDIUMchangmingxie tcc-transaction Fastjson AutoType REST API Fastjson.parseObject deserializationEPSS 0.3%CVE-2022-29206MEDIUMMissing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlowEPSS 0.3%CVE-2024-0126HIGHNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A EPSS 0.3%CVE-2020-3435MEDIUMCisco AnyConnect Secure Mobility Client for Windows Profile Modification VulnerabilityEPSS 0.3%CVE-2022-39863LOWIntent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers to access content providers without permissiEPSS 0.3%CVE-2025-11345MEDIUMILIAS Test Import unserialize deserializationEPSS 0.3%CVE-2024-20327HIGHA vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation ServicesEPSS 0.3%CVE-2026-44482CRITICALsoundcloud-rpc: Remote Code Execution via XSS in Track TitleEPSS 0.3%CVE-2023-1789MEDIUMImproper Input Validation in firefly-iii/firefly-iiiEPSS 0.3%CVE-2026-37460HIGHMissing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cauEPSS 0.3%CVE-2022-4332MEDIUMSprecher: Vulnerable firmware verificationEPSS 0.3%CVE-2026-27702CRITICALBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)EPSS 0.3%CVE-2023-46763—Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause backgEPSS 0.3%CVE-2026-1577MEDIUMIBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueriesEPSS 0.3%CVE-2025-52544HIGHArbitrary read file from the filesystemEPSS 0.3%