CWE-704
295 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 295
- Last 12 months
- 51
- Critical
- 23
- Known exploited
- 0
Critical 23High 204Medium 62Low 6Not scored 0
CVEs per yearBy the year they were published
- 20151
- 20168
- 201732
- 201895
- 201921
- 20208
- 20219
- 202221
- 202311
- 202414
- 202516
- 202650
Newest CVEs
- CVE-2026-17211
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium4.3 - CVE-2026-122319
Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
kyverno · kyverno
High8.7 - CVE-2026-102703
arbitrary read/write via grant copy
Xen · Xen
Medium4.4 - CVE-2026-121589
spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion
spatie · url-signer
Medium6.9 - CVE-2026-121262
phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion
phpMyAdmin · SQL-Parser
Medium6.9 - CVE-2026-110816
qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string
ljharb · qs
Medium6.3 - CVE-2026-104634
beam_mcp: JSON boolean and null tool arguments reach dispatch as strings
ScriptKittyOS · beam_mcp
Low2.3 - CVE-2026-105754
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
vllm-project · vllm
Medium6.5 - CVE-2026-104420
Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks
ZcashFoundation · zebra
Medium6.9 - CVE-2026-20249
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
High8.6