Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1821)
CWE-416 (1289)
CWE-862 (1175)
CWE-89 (1097)
CWE-22 (1023)
CWE-125 (879)
CWE-200 (847)
CWE-306 (837)
CWE-122 (829)
CWE-20 (795)
CWE-78 (710)
CWE-918 (689)
CWE-787 (681)
CWE-94 (641)
CWE-863 (617)
CWE-74 (600)
CWE-639 (540)
CWE-400 (528)
CWE-269 (501)
CWE-119 (494)
CWE-502 (468)
CWE-770 (439)
CWE-287 (431)
CWE-121 (406)
CWE-77 (373)
CWE-190 (367)
CWE-362 (323)
CWE-352 (276)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-87353 |
medium | 4.5 | 0.0012 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Port | |
CVE-2026-60745 |
medium | 4.4 | 0.0018 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Appl | |
CVE-2026-60878 |
medium | 4.4 | 0.0018 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Proc | |
CVE-2026-87355 |
medium | 4.4 | 0.0017 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Pane | |
CVE-2024-0340 |
medium | 4.4 | 0.0024 | 2024-01-09 | A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does | |
CVE-2026-46406 |
medium | 4.4 | 0.0015 | 2026-06-29 | Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wro | |
CVE-2026-44276 |
medium | 4.4 | 0.0015 | 2026-07-22 | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Info | |
CVE-2024-32385 |
medium | 4.3 | 0.0031 | 2026-07-16 | An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attacke | |
CVE-2026-83382 |
medium | 4.3 | 0.0028 | 2026-10-20 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal O | |
CVE-2026-87354 |
medium | 4.3 | 0.0028 | 2026-10-20 | Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported ver | |
CVE-2026-87361 |
medium | 4.3 | 0.0027 | 2026-10-20 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-87379 |
medium | 4.3 | 0.0028 | 2026-10-20 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core | |
CVE-2026-91283 |
medium | 4.3 | 0.0021 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Run | |
CVE-2026-91657 |
medium | 4.3 | 0.0019 | 2026-10-20 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 2 | |
CVE-2025-6425 |
medium | 4.3 | 0.0031 | 2025-06-24 | An attacker who enumerated resources from the WebCompat extension could have obtained a persistent U | |
CVE-2026-22015 |
medium | 4.3 | 0.0024 | 2026-04-21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). | |
CVE-2026-34296 |
medium | 4.3 | 0.0022 | 2026-04-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply | |
CVE-2026-7999 |
medium | 4.3 | 0.0016 | 2026-05-06 | Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker | |
CVE-2026-0245 |
medium | 4.3 | 0.0014 | 2026-05-13 | Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access | |
CVE-2026-12320 |
medium | 4.3 | 0.0018 | 2026-06-16 | Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 15 | |
CVE-2026-12117 |
medium | 4.3 | 0.0026 | 2026-06-16 | Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allo | |
CVE-2026-49288 |
medium | 4.3 | 0.0027 | 2026-06-19 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, | |
CVE-2026-49355 |
medium | 4.3 | 0.0029 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET /api/v3/mee | |
CVE-2026-48891 |
medium | 4.3 | 0.0064 | 2026-07-07 | A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable | |
CVE-2026-55664 |
medium | 4.3 | 0.0033 | 2026-07-10 | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms | |
CVE-2026-57205 |
medium | 4.3 | 0.0091 | 2026-07-16 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-g | |
CVE-2026-60307 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor | |
CVE-2026-60395 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that a | |
CVE-2026-60408 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database (comp | |
CVE-2026-61292 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle U.S. Federal Financials product of Oracle E-Business Suite (component: I | |
CVE-2026-61315 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Suppor | |
CVE-2026-61316 |
medium | 4.3 | 0.0030 | 2026-07-21 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Suppor | |
CVE-2026-63240 |
medium | 4.3 | 0.0029 | 2026-07-29 | An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain co | |
CVE-2026-17928 |
medium | 4.3 | 0.0026 | 2026-07-30 | Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remot | |
CVE-2026-10569 |
medium | 4.3 | 0.0030 | 2026-07-30 | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevO | |
CVE-2026-67529 |
medium | 4.3 | 0.0041 | 2026-07-30 | OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/time | |
CVE-2026-64664 |
medium | 4.3 | 0.0034 | 2026-08-06 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and 6.24.0, a | |
CVE-2026-73229 |
medium | 4.3 | 0.0037 | 2026-08-11 | Django REST framework is a powerful and flexible toolkit for building Web APIs. Prior to 3.17.2, Dja | |
CVE-2026-54183 |
medium | 4.3 | 0.0042 | 2026-08-12 | Apache Airflow's secrets masker hides values stored under sensitive key names when they are displaye | |
CVE-2026-63640 |
medium | 4.3 | 0.0030 | 2026-08-18 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecret | |
CVE-2026-76041 |
medium | 4.3 | 0.0035 | 2026-08-18 | Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to poten | |
CVE-2026-76256 |
medium | 4.3 | 0.0030 | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway ve | |
CVE-2026-91528 |
medium | 4.3 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Securit | |
CVE-2026-91598 |
medium | 4.3 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91600 |
medium | 4.3 | 0.0028 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-91607 |
medium | 4.3 | 0.0022 | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (co | |
CVE-2026-60809 |
medium | 4.2 | 0.0019 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Webl | |
CVE-2026-60876 |
medium | 4.2 | 0.0019 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Sear | |
CVE-2026-83390 |
medium | 4.2 | 0.0025 | 2026-10-20 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diag | |
CVE-2026-87330 |
medium | 4.2 | 0.0014 | 2026-10-20 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev |