CWE-201

CVEs per yearBy the year they were published

1. 20131
2. 20185
3. 20192
4. 202010
5. 20218
6. 20228
7. 202317
8. 202442
9. 2025139
10. 2026271

Newest CVEs

• CVE-2026-123551

  OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket

  OpenIdentityPlatform · OpenAM

  Critical10.0
• CVE-2026-123513

  Vikunja before 2.7.1 Auth Token Leak via API URL Change

  go-vikunja · vikunja

  High7.6
• CVE-2026-119465

  WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

  WPVibes · Elementor Addon Elements

  Medium5.3
• CVE-2026-71863

  SecureDrop: Onion Service client auth credentials copied to Monitor Server

  freedomofpress · securedrop

  Low2.6
• CVE-2026-123290

  In JetBrains Datalore before 2026.4 hidden notebook code was exposed to unauthenticated users via the public interactive report content endpoint

  JetBrains · Datalore

  Medium5.3
• CVE-2026-119499

  WordPress FloristPress plugin <= 7.8.4 - Sensitive Data Exposure vulnerability

  BAKKBONE Australia · FloristPress

  High7.5
• CVE-2026-111753

  Angular: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)

  angular · angular

  Medium5.9
• CVE-2026-120716

  Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an…

  Devolutions · Server

  Medium6.5
• CVE-2026-114183

  WordPress AnyWhere Elementor plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

  WPVibes · AnyWhere Elementor

  Medium6.5
• CVE-2026-115293

  Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

  Elastic · Kibana

  Medium6.5

Vendors it comes up for most

1. GitLab16
2. Cisco11
3. curl10
4. Crocoblock9
5. Red Hat8
6. Liferay7
7. Drupal6
8. JetBrains6
9. Apache Software Foundation5
10. Devolutions5