CWE-16

319 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 11High 115Medium 162Low 31Not scored 0

CVEs per yearBy the year they were published

CVE-2026-101117
IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
IBM · WebSphere Extreme Scale
Critical9.1
CVE-2026-56586
HCL IEM was affected with X-Content-Type-Options Header Missing
HCLSoftware · IntelliOps Event Management
Low3.1
CVE-2026-14971
This PowerVM Novalink update is being released to address
IBM · PowerVM Novalink
Low3.9
CVE-2026-4433
An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and…
Tenable, Inc. · Tenable Operation Technology
Low1.9
CVE-2025-12221
CSRF Token not Properly Implemented
Azure Access Technology · BLU-IC2
Low2.1
CVE-2025-20151
Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability
Cisco · Cisco IOS XE Catalyst SD-WAN
Medium4.3
CVE-2024-46909
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
Progress Software Corporation · WhatsUp Gold
Critical9.8
CVE-2018-11922
Configurations in Android Build
Qualcomm, Inc. · Snapdragon
High7.5
CVE-2024-47294
Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium4.4
CVE-2024-47291
Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium5.6