CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
Python has 284 CVEs, 0 exploited. Pick a weakness or a product to list them.
By weakness
- Memory Corruption68
- Denial of Service41
- File and Path Handling33
- Injection and Smuggling27
- Input Validation and Logic26
- Cryptography15
- Access Control10
- Command and Code Injection10
- Information Disclosure5
- Other weaknesses4
- Race Conditions4
- Open Redirect3
- Cross-site Scripting3
- Authentication2
- Misconfiguration and Insecure Design2
- Server-Side Request Forgery2
- Deserialization and Object Injection1
- Supply Chain and Malicious Code1
- No weakness recorded27
By product
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.